|
|
|
|
@ -3,54 +3,64 @@ from storage import cache
|
|
|
|
|
from trezor import wire
|
|
|
|
|
from trezor.crypto import bip32
|
|
|
|
|
|
|
|
|
|
from apps.cardano import CURVE, SEED_NAMESPACE
|
|
|
|
|
from apps.cardano import SEED_NAMESPACE
|
|
|
|
|
from apps.common import mnemonic
|
|
|
|
|
from apps.common.passphrase import get as get_passphrase
|
|
|
|
|
|
|
|
|
|
if False:
|
|
|
|
|
from typing import Tuple
|
|
|
|
|
|
|
|
|
|
from apps.common.seed import Bip32Path, MsgIn, MsgOut, Handler, HandlerWithKeychain
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
class Keychain:
|
|
|
|
|
def __init__(self, path: list, root: bip32.HDNode):
|
|
|
|
|
self.path = path
|
|
|
|
|
"""Cardano keychain hard-coded to SEED_NAMESPACE."""
|
|
|
|
|
|
|
|
|
|
def __init__(self, root: bip32.HDNode) -> None:
|
|
|
|
|
self.root = root
|
|
|
|
|
|
|
|
|
|
def validate_path(self, checked_path: list, checked_curve: str):
|
|
|
|
|
if checked_curve != CURVE or checked_path[:2] != SEED_NAMESPACE:
|
|
|
|
|
def match_path(self, path: Bip32Path) -> Tuple[int, Bip32Path]:
|
|
|
|
|
if path[: len(SEED_NAMESPACE)] != SEED_NAMESPACE:
|
|
|
|
|
raise wire.DataError("Forbidden key path")
|
|
|
|
|
return 0, path[len(SEED_NAMESPACE) :]
|
|
|
|
|
|
|
|
|
|
def derive(self, node_path: list) -> bip32.HDNode:
|
|
|
|
|
# check we are in the cardano namespace
|
|
|
|
|
prefix = node_path[: len(self.path)]
|
|
|
|
|
suffix = node_path[len(self.path) :]
|
|
|
|
|
if prefix != self.path:
|
|
|
|
|
raise wire.DataError("Forbidden key path")
|
|
|
|
|
def derive(self, node_path: Bip32Path) -> bip32.HDNode:
|
|
|
|
|
_, suffix = self.match_path(node_path)
|
|
|
|
|
# derive child node from the root
|
|
|
|
|
node = self.root.clone()
|
|
|
|
|
for i in suffix:
|
|
|
|
|
node.derive_cardano(i)
|
|
|
|
|
return node
|
|
|
|
|
|
|
|
|
|
# XXX the root node remains in session cache so we should not delete it
|
|
|
|
|
# def __del__(self) -> None:
|
|
|
|
|
# self.root.__del__()
|
|
|
|
|
|
|
|
|
|
async def get_keychain(ctx: wire.Context) -> Keychain:
|
|
|
|
|
root = cache.get(cache.APP_CARDANO_ROOT)
|
|
|
|
|
|
|
|
|
|
@cache.stored_async(cache.APP_CARDANO_ROOT)
|
|
|
|
|
async def get_keychain(ctx: wire.Context) -> Keychain:
|
|
|
|
|
if not storage.is_initialized():
|
|
|
|
|
raise wire.NotInitialized("Device is not initialized")
|
|
|
|
|
|
|
|
|
|
if root is None:
|
|
|
|
|
passphrase = await get_passphrase(ctx)
|
|
|
|
|
if mnemonic.is_bip39():
|
|
|
|
|
# derive the root node from mnemonic and passphrase
|
|
|
|
|
root = bip32.from_mnemonic_cardano(
|
|
|
|
|
mnemonic.get_secret().decode(), passphrase
|
|
|
|
|
)
|
|
|
|
|
else:
|
|
|
|
|
seed = mnemonic.get_seed(passphrase)
|
|
|
|
|
root = bip32.from_seed(seed, "ed25519 cardano seed")
|
|
|
|
|
|
|
|
|
|
# derive the namespaced root node
|
|
|
|
|
for i in SEED_NAMESPACE:
|
|
|
|
|
root.derive_cardano(i)
|
|
|
|
|
storage.cache.set(cache.APP_CARDANO_ROOT, root)
|
|
|
|
|
|
|
|
|
|
keychain = Keychain(SEED_NAMESPACE, root)
|
|
|
|
|
passphrase = await get_passphrase(ctx)
|
|
|
|
|
if mnemonic.is_bip39():
|
|
|
|
|
# derive the root node from mnemonic and passphrase
|
|
|
|
|
root = bip32.from_mnemonic_cardano(mnemonic.get_secret().decode(), passphrase)
|
|
|
|
|
else:
|
|
|
|
|
seed = mnemonic.get_seed(passphrase)
|
|
|
|
|
root = bip32.from_seed(seed, "ed25519 cardano seed")
|
|
|
|
|
|
|
|
|
|
# derive the namespaced root node
|
|
|
|
|
for i in SEED_NAMESPACE:
|
|
|
|
|
root.derive_cardano(i)
|
|
|
|
|
|
|
|
|
|
keychain = Keychain(root)
|
|
|
|
|
return keychain
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def with_keychain(func: HandlerWithKeychain[MsgIn, MsgOut]) -> Handler[MsgIn, MsgOut]:
|
|
|
|
|
async def wrapper(ctx: wire.Context, msg: MsgIn) -> MsgOut:
|
|
|
|
|
keychain = await get_keychain(ctx)
|
|
|
|
|
return await func(ctx, msg, keychain)
|
|
|
|
|
|
|
|
|
|
return wrapper
|
|
|
|
|
|
matejcik
4 years ago
committed by