parent
df17be0287
commit
cabb334448
@ -1,46 +1,57 @@
|
||||
from trezor.crypto import hashlib, hmac, random
|
||||
from apps.common import storage
|
||||
|
||||
memory = {}
|
||||
_seed = None
|
||||
_passphrase = None
|
||||
_cached_seed = None
|
||||
_cached_passphrase = None
|
||||
|
||||
|
||||
def get_state(state: bytes=None, passphrase: str=None):
|
||||
|
||||
if state is None:
|
||||
def get_state(prev_state: bytes = None, passphrase: str = None) -> bytes:
|
||||
if prev_state is None:
|
||||
salt = random.bytes(32) # generate a random salt if no state provided
|
||||
else:
|
||||
salt = state[:32] # use salt from provided state
|
||||
|
||||
salt = prev_state[:32] # use salt from provided state
|
||||
if len(salt) != 32:
|
||||
return None # invalid state
|
||||
if passphrase is None:
|
||||
global _passphrase
|
||||
if _passphrase is None:
|
||||
return None
|
||||
passphrase = _passphrase # use cached passphrase
|
||||
if _cached_passphrase is None:
|
||||
return None # we don't have any passphrase to compute the state
|
||||
else:
|
||||
passphrase = _cached_passphrase # use cached passphrase
|
||||
return _compute_state(salt, passphrase)
|
||||
|
||||
# state = HMAC(passphrase, salt || device_id)
|
||||
msg = salt + storage.get_device_id().encode()
|
||||
state = hmac.new(passphrase.encode(), msg, hashlib.sha256).digest()
|
||||
|
||||
def _compute_state(salt: bytes, passphrase: str) -> bytes:
|
||||
# state = HMAC(passphrase, salt || device_id)
|
||||
message = salt + storage.get_device_id().encode()
|
||||
state = hmac.new(passphrase.encode(), message, hashlib.sha256).digest()
|
||||
return salt + state
|
||||
|
||||
|
||||
def get_seed():
|
||||
global _seed
|
||||
return _seed
|
||||
return _cached_seed
|
||||
|
||||
|
||||
def set_seed(seed, passphrase):
|
||||
global _seed, _passphrase
|
||||
_seed, _passphrase = seed, passphrase
|
||||
def get_passphrase():
|
||||
return _cached_passphrase
|
||||
|
||||
|
||||
def has_passphrase():
|
||||
global _passphrase
|
||||
return _passphrase is not None
|
||||
return _cached_passphrase is not None
|
||||
|
||||
|
||||
def set_seed(seed):
|
||||
global _cached_seed
|
||||
_cached_seed = seed
|
||||
|
||||
def clear():
|
||||
global _seed, _passphrase
|
||||
_seed, _passphrase = None, None
|
||||
|
||||
def set_passphrase(passphrase):
|
||||
global _cached_passphrase
|
||||
_cached_passphrase = passphrase
|
||||
|
||||
|
||||
def clear(skip_passphrase: bool = False):
|
||||
set_seed(None)
|
||||
if skip_passphrase:
|
||||
set_passphrase('')
|
||||
else:
|
||||
set_passphrase(None)
|
||||
|
Loading…
Reference in new issue