mirror of
https://github.com/trezor/trezor-firmware.git
synced 2025-01-16 02:10:55 +00:00
signer: drop the directory, we don't use this anymore
This commit is contained in:
Pavol Rusnak
parent
e0108d34bf
commit
a5563af0fa
4
signer/.gitignore
vendored
4
signer/.gitignore
vendored
@ -1,4 +0,0 @@
|
|||||||
config_pb2.py
|
|
||||||
config_pb2.pyc
|
|
||||||
config_signed.bin
|
|
||||||
*.pem
|
|
||||||
@ -1,29 +0,0 @@
|
|||||||
{
|
|
||||||
"whitelist_urls": [
|
|
||||||
"https?://localhost(:\\d+)?(/.*)?",
|
|
||||||
"https?://localhost\\.mytrezor\\.com(:\\d+)?(/.*)?",
|
|
||||||
"https://mytrezor\\.com(/.*)?",
|
|
||||||
"https://[\\w\\.-]+\\.mytrezor\\.com(/.*)?",
|
|
||||||
"https://trezor\\.io(/.*)?",
|
|
||||||
"https://[\\w\\.-]+\\.trezor\\.io(/.*)?",
|
|
||||||
"https://trezor\\.github\\.io(/.*)?",
|
|
||||||
"https://greenaddress\\.it(/.*)?",
|
|
||||||
"https://[\\w\\.-]+\\.greenaddress\\.it(/.*)?",
|
|
||||||
"https://coinprism\\.com(/.*)?",
|
|
||||||
"https://[\\w\\.-]+\\.coinprism\\.com(/.*)?",
|
|
||||||
"https://bitex\\.la(/.*)?",
|
|
||||||
"https://[\\w\\.-]+\\.bitex\\.la(/.*)?",
|
|
||||||
"https://dash\\.run(/.*)?",
|
|
||||||
"https://[\\w\\.-]+\\.dash\\.run(/.*)?",
|
|
||||||
"https://0xproject\\.com(/.*)?",
|
|
||||||
"https://[\\w\\.-]+\\.unchained-capital\\.com(/.*)?",
|
|
||||||
"chrome-extension://jcjjhjgimijdkoamemaghajlhegmoclj(/.*)?"
|
|
||||||
],
|
|
||||||
"blacklist_urls": [
|
|
||||||
],
|
|
||||||
"known_devices": [
|
|
||||||
["0x534c", "0x0001", "Trezor"],
|
|
||||||
["0x1209", "0x53c0", "Trezor2 Bootloader"],
|
|
||||||
["0x1209", "0x53c1", "Trezor2"]
|
|
||||||
]
|
|
||||||
}
|
|
||||||
@ -1,32 +0,0 @@
|
|||||||
syntax = "proto2";
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Configuration format for TREZOR plugin
|
|
||||||
*/
|
|
||||||
|
|
||||||
// Sugar for easier handling in Java
|
|
||||||
option java_package = "com.satoshilabs.trezor.lib.protobuf";
|
|
||||||
option java_outer_classname = "TrezorConfig";
|
|
||||||
|
|
||||||
import "google/protobuf/descriptor.proto";
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Device Descriptor used in Configuration
|
|
||||||
*/
|
|
||||||
message DeviceDescriptor {
|
|
||||||
optional uint32 vendor_id = 1; // USB vendor ID
|
|
||||||
optional uint32 product_id = 2; // USB product ID
|
|
||||||
optional string serial_number = 3; // USB serial number
|
|
||||||
optional string path = 4; // USB device path
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Plugin Configuration
|
|
||||||
*/
|
|
||||||
message Configuration {
|
|
||||||
repeated string whitelist_urls = 1; // allowed URLs for plugin
|
|
||||||
repeated string blacklist_urls = 2; // forbidden URLs for plugin
|
|
||||||
required google.protobuf.FileDescriptorSet wire_protocol = 3; // compiled specification of write protocol (serialized using "protoc -o")
|
|
||||||
repeated DeviceDescriptor known_devices = 4; // descriptors of allowed devices
|
|
||||||
optional uint32 valid_until = 5; // expiration timestamp
|
|
||||||
}
|
|
||||||
@ -1,5 +0,0 @@
|
|||||||
-----BEGIN EC PRIVATE KEY-----
|
|
||||||
MHQCAQEEIMS7yx++yZ1lv1nYXIy2LuLblj8P4Qb0g9mvpzvU45qKoAcGBSuBBAAK
|
|
||||||
oUQDQgAEeNQwJ0+MXsEyEzgVHp8n9MZ2oAi9+GONB8C2vpqzXHGhUYBjJDrNTf6W
|
|
||||||
tm4/LsgBPI4HLNCbODShn4H2Wcw0VQ==
|
|
||||||
-----END EC PRIVATE KEY-----
|
|
||||||
101
signer/sign.py
101
signer/sign.py
@ -1,101 +0,0 @@
|
|||||||
#!/usr/bin/python
|
|
||||||
import subprocess
|
|
||||||
import os
|
|
||||||
import json
|
|
||||||
import time
|
|
||||||
import ecdsa
|
|
||||||
import hashlib
|
|
||||||
import binascii
|
|
||||||
from google.protobuf.descriptor_pb2 import FileDescriptorSet
|
|
||||||
|
|
||||||
PROTOBUF_PROTO_DIR=os.environ.get('PROTOBUF_PROTO_DIR', '/usr/include/')
|
|
||||||
TREZOR_PROTO_DIR=os.environ.get('TREZOR_PROTO_DIR', '../protob/')
|
|
||||||
|
|
||||||
def compile_config():
|
|
||||||
cmd = "protoc --python_out=../signer/ -I" + PROTOBUF_PROTO_DIR + " -I./ config.proto"
|
|
||||||
subprocess.check_call(cmd.split(), cwd=TREZOR_PROTO_DIR)
|
|
||||||
|
|
||||||
def parse_json():
|
|
||||||
return json.loads(open('config.json', 'r').read())
|
|
||||||
|
|
||||||
|
|
||||||
def get_compiled_proto():
|
|
||||||
# Compile trezor.proto to binary format
|
|
||||||
pdir = os.path.abspath(TREZOR_PROTO_DIR)
|
|
||||||
pfile = os.path.join(pdir, "messages.proto")
|
|
||||||
cmd = "protoc --include_imports -I" + PROTOBUF_PROTO_DIR + " -I" + pdir + " " + pfile + " -otrezor.bin"
|
|
||||||
|
|
||||||
subprocess.check_call(cmd.split())
|
|
||||||
|
|
||||||
# Load compiled protocol description to string
|
|
||||||
proto = open('trezor.bin', 'r').read()
|
|
||||||
os.unlink('trezor.bin')
|
|
||||||
|
|
||||||
# Parse it into FileDescriptorSet structure
|
|
||||||
compiled = FileDescriptorSet()
|
|
||||||
compiled.ParseFromString(proto)
|
|
||||||
return compiled
|
|
||||||
|
|
||||||
def compose_message(json, proto):
|
|
||||||
import config_pb2
|
|
||||||
|
|
||||||
cfg = config_pb2.Configuration()
|
|
||||||
cfg.valid_until = 2147483647 # maxint
|
|
||||||
cfg.wire_protocol.MergeFrom(proto)
|
|
||||||
|
|
||||||
for url in json['whitelist_urls']:
|
|
||||||
cfg.whitelist_urls.append(str(url))
|
|
||||||
|
|
||||||
for url in json['blacklist_urls']:
|
|
||||||
cfg.blacklist_urls.append(str(url))
|
|
||||||
|
|
||||||
for dev in json['known_devices']:
|
|
||||||
desc = cfg.known_devices.add()
|
|
||||||
desc.vendor_id = int(dev[0], 16)
|
|
||||||
desc.product_id = int(dev[1], 16)
|
|
||||||
|
|
||||||
return cfg.SerializeToString()
|
|
||||||
|
|
||||||
def sign_message(data, key):
|
|
||||||
if key.startswith('-----BEGIN'):
|
|
||||||
key = ecdsa.keys.SigningKey.from_pem(key)
|
|
||||||
else:
|
|
||||||
key = ecdsa.keys.SigningKey.from_secret_exponent(secexp = int(key, 16), curve=ecdsa.curves.SECP256k1, hashfunc=hashlib.sha256)
|
|
||||||
|
|
||||||
verify = key.get_verifying_key()
|
|
||||||
print "Verifying key:"
|
|
||||||
print verify.to_pem()
|
|
||||||
|
|
||||||
return key.sign_deterministic(data, hashfunc=hashlib.sha256)
|
|
||||||
|
|
||||||
def pack_datafile(filename, signature, data):
|
|
||||||
if len(signature) != 64:
|
|
||||||
raise Exception("Signature must be 64 bytes long")
|
|
||||||
|
|
||||||
fp = open(filename, 'w')
|
|
||||||
fp.write(binascii.hexlify(signature))
|
|
||||||
fp.write(binascii.hexlify(data))
|
|
||||||
fp.close()
|
|
||||||
|
|
||||||
print "Signature and data stored to", filename
|
|
||||||
|
|
||||||
if __name__ == '__main__':
|
|
||||||
key = ''
|
|
||||||
print "Paste ECDSA private key (in PEM format or SECEXP format) and press Enter:"
|
|
||||||
while True:
|
|
||||||
inp = raw_input()
|
|
||||||
if inp == '':
|
|
||||||
break
|
|
||||||
|
|
||||||
key += inp + "\n"
|
|
||||||
|
|
||||||
# key = open('sample.key', 'r').read()
|
|
||||||
|
|
||||||
compile_config()
|
|
||||||
json = parse_json()
|
|
||||||
proto = get_compiled_proto()
|
|
||||||
|
|
||||||
data = compose_message(json, proto)
|
|
||||||
signature = sign_message(data, key)
|
|
||||||
|
|
||||||
pack_datafile('config_signed.bin', signature, data)
|
|
||||||
Loading…
Reference in New Issue
Block a user