trezor-firmware/tools/build_vendorheader

#!/usr/bin/env python3
import sys
import struct
import binascii


# encode vendor name, add length byte and padding to multiple of 4
def encode_vendor(vname):
    vbin = vname.encode()
    vbin = struct.pack("<B", len(vbin)) + vbin
    vbin += b"\0" * (-len(vbin) & 3)
    return vbin


def encode_pubkey(pubkey):
    if len(pubkey) != 64:
        raise Exception("Wrong public key length")
    return binascii.unhexlify(pubkey)


def decode_vtrust(vtrust):
    t = 0xFFFF
    for i, b in enumerate(reversed(vtrust)):
        if b != ".":
            t &= ~(1 << i)
    return t


def main():
    if len(sys.argv) < 7:
        print(
            'Usage build_vendorheader "pubkey1hex:pubkey2hex:..." m version vendortrust vendorname vendorimage.toif vendorheader.bin'
        )
        return 1

    keys = [encode_pubkey(x) for x in sys.argv[1].split(":")]
    m = int(sys.argv[2])
    (vmajor, vminor) = [int(x) for x in sys.argv[3].split(".")]
    vtrust = decode_vtrust(sys.argv[4])
    vname = sys.argv[5]
    ifn = sys.argv[6]
    ofn = sys.argv[7]
    if not ifn.endswith(".toif"):
        print("Must provide TOIF file")
        return 2

    expiry = 0
    vheader = b"TRZV" + struct.pack(
        "<IIBBBBH", 0, expiry, vmajor, vminor, m, len(keys), vtrust
    )
    vheader += 14 * b"\0"
    for k in keys:
        vheader += k
    vheader += encode_vendor(vname) + open(ifn, "rb").read()
    padding = 65 + (-len(vheader) - 65) & 511
    vheader += b"\0" * padding

    # put in length
    vheader = vheader[0:4] + struct.pack("<I", len(vheader)) + vheader[8:]

    with open(ofn, "wb") as f:
        f.write(vheader)


main()