arno/trezor-firmware
1
0
Fork 0
mirror of https://github.com/trezor/trezor-firmware.git synced 2025-01-03 12:00:59 +00:00
Code Issues Releases Wiki Activity

src/apps/management/recovery_device: constant time mnemonic checking in dry run

Browse Source
This commit is contained in:
Pavol Rusnak 2019-02-18 18:44:27 +01:00
parent 6233cc0720
commit 0751c667c3
No known key found for this signature in database
GPG Key ID: 91F3B339B9A02A3D
2 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/apps/management/recovery_device.py
View File

@ -1,5 +1,6 @@
from trezor import config, ui, wire
from trezor.crypto import bip39
from trezor.crypto.hashlib import sha256
from trezor.messages.ButtonRequest import ButtonRequest
from trezor.messages.ButtonRequestType import (
MnemonicInput,
@ -12,7 +13,7 @@ from trezor.pin import pin_to_int
from trezor.ui.mnemonic import MnemonicKeyboard
from trezor.ui.text import Text
from trezor.ui.word_select import WordSelector
from trezor.utils import format_ordinal
from trezor.utils import consteq, format_ordinal
from apps.common import storage
from apps.common.confirm import require_confirm
@ -54,7 +55,9 @@ async def recovery_device(ctx, msg):
# dry run
if msg.dry_run:
if storage.get_mnemonic() == mnemonic:
digest_input = sha256(mnemonic).digest()
digest_stored = sha256(storage.get_mnemonic()).digest()
if consteq(digest_stored, digest_input):
return Success(
message="The seed is valid and matches the one in the device"
)

1
src/trezor/utils.py
View File

@ -7,6 +7,7 @@ from trezorutils import ( # noqa: F401
VERSION_MAJOR,
VERSION_MINOR,
VERSION_PATCH,
consteq,
halt,
memcpy,
set_mode_unprivileged,