mirror of
https://github.com/trezor/trezor-firmware.git
synced 2024-11-22 07:28:10 +00:00
tools: add trezor-otp.py
This commit is contained in:
parent
61f403c421
commit
a30586647a
101
tools/trezor-otp.py
Executable file
101
tools/trezor-otp.py
Executable file
@ -0,0 +1,101 @@
|
||||
#!/usr/bin/env python3
|
||||
import configparser
|
||||
import os
|
||||
import re
|
||||
import sys
|
||||
|
||||
import pyotp
|
||||
from trezorlib.client import TrezorClient
|
||||
from trezorlib.misc import decrypt_keyvalue, encrypt_keyvalue
|
||||
from trezorlib.tools import parse_path
|
||||
from trezorlib.transport import get_transport
|
||||
from trezorlib.ui import ClickUI
|
||||
|
||||
BIP32_PATH = parse_path("10016h/0")
|
||||
|
||||
|
||||
def encrypt(type, domain, secret):
|
||||
transport = get_transport()
|
||||
client = TrezorClient(transport, ClickUI())
|
||||
dom = type.upper() + ": " + domain
|
||||
enc = encrypt_keyvalue(client, BIP32_PATH, dom, secret.encode(), False, True)
|
||||
client.close()
|
||||
return enc.hex()
|
||||
|
||||
|
||||
def decrypt(type, domain, secret):
|
||||
transport = get_transport()
|
||||
client = TrezorClient(transport, ClickUI())
|
||||
dom = type.upper() + ": " + domain
|
||||
dec = decrypt_keyvalue(client, BIP32_PATH, dom, secret, False, True)
|
||||
client.close()
|
||||
return dec
|
||||
|
||||
|
||||
class Config:
|
||||
def __init__(self):
|
||||
XDG_CONFIG_HOME = os.getenv("XDG_CONFIG_HOME", os.path.expanduser("~/.config"))
|
||||
os.makedirs(XDG_CONFIG_HOME, exist_ok=True)
|
||||
self.filename = XDG_CONFIG_HOME + "/trezor-otp.ini"
|
||||
self.config = configparser.ConfigParser()
|
||||
self.config.read(self.filename)
|
||||
|
||||
def add(self, domain, secret, type="totp"):
|
||||
self.config[domain] = {}
|
||||
self.config[domain]["secret"] = encrypt(type, domain, secret)
|
||||
self.config[domain]["type"] = type
|
||||
if type == "hotp":
|
||||
self.config[domain]["counter"] = "0"
|
||||
with open(self.filename, "w") as f:
|
||||
self.config.write(f)
|
||||
|
||||
def get(self, domain):
|
||||
s = self.config[domain]
|
||||
if s["type"] == "hotp":
|
||||
s["counter"] = str(int(s["counter"]) + 1)
|
||||
with open(self.filename, "w") as f:
|
||||
self.config.write(f)
|
||||
secret = decrypt(s["type"], domain, bytes.fromhex(s["secret"]))
|
||||
if s["type"] == "totp":
|
||||
return pyotp.TOTP(secret).now()
|
||||
if s["type"] == "hotp":
|
||||
c = int(s["counter"])
|
||||
return pyotp.HOTP(secret).at(c)
|
||||
return ValueError("unknown domain or type")
|
||||
|
||||
|
||||
def add():
|
||||
c = Config()
|
||||
domain = input("domain: ")
|
||||
while True:
|
||||
secret = input("secret: ")
|
||||
if re.match(r"^[A-Z2-7]{16}$", secret):
|
||||
break
|
||||
print("invalid secret")
|
||||
while True:
|
||||
type = input("type (t=totp h=hotp): ")
|
||||
if type in ("t", "h"):
|
||||
break
|
||||
print("invalid type")
|
||||
c.add(domain, secret, type + "otp")
|
||||
print("Entry added")
|
||||
|
||||
|
||||
def get(domain):
|
||||
c = Config()
|
||||
s = c.get(domain)
|
||||
print(s)
|
||||
|
||||
|
||||
def main():
|
||||
if len(sys.argv) < 2:
|
||||
print("Usage: trezor-otp.py [add|domain]")
|
||||
sys.exit(1)
|
||||
if sys.argv[1] == "add":
|
||||
add()
|
||||
else:
|
||||
get(sys.argv[1])
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
main()
|
Loading…
Reference in New Issue
Block a user