# This file is part of the Trezor project. # # Copyright (C) 2012-2019 SatoshiLabs and contributors # # This library is free software: you can redistribute it and/or modify # it under the terms of the GNU Lesser General Public License version 3 # as published by the Free Software Foundation. # # This library is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU Lesser General Public License for more details. # # You should have received a copy of the License along with this library. # If not, see . import pytest from trezorlib import messages from trezorlib.tools import parse_path def _get_xpub(client, passphrase): response = client.call_raw( messages.GetPublicKey(address_n=parse_path("44'/0'/0'"), coin_name="Bitcoin") ) if passphrase is not None: assert isinstance(response, messages.PassphraseRequest) response = client.call_raw(messages.PassphraseAck(passphrase=passphrase)) assert isinstance(response, messages.PublicKey) return response.xpub def _enable_passphrase(client): response = client.call_raw(messages.ApplySettings(use_passphrase=True)) assert isinstance(response, messages.ButtonRequest) # confirm dialog client.debug.press_yes() response = client.call_raw(messages.ButtonAck()) assert isinstance(response, messages.Success) @pytest.mark.skip_t1 # TODO @pytest.mark.skip_ui @pytest.mark.setup_client() def test_session_with_passphrase(client): # Turn on passphrase. _enable_passphrase(client) # Let's start the communication by calling Initialize. response = client.call_raw(messages.Initialize()) assert isinstance(response, messages.Features) session_id = response.session_id assert len(session_id) == 32 # GetPublicKey requires passphrase and since it is not cached, # Trezor will prompt for it. xpub = _get_xpub(client, passphrase="A") assert ( xpub == "xpub6CekxGcnqnJ6osfY4Rrq7W5ogFtR54KUvz4H16XzaQuukMFZCGebEpVznfq4yFcKEmYyShwj2UKjL7CazuNSuhdkofF4mHabHkLxCMVvsqG" ) # Call Initialize again, this time with the received session id and then call # GetPublicKey. The passphrase should be cached now so Trezor must # not ask for it again, whilst returning the same xpub. response = client.call_raw(messages.Initialize(session_id=session_id)) assert isinstance(response, messages.Features) xpub = _get_xpub(client, passphrase=None) assert ( xpub == "xpub6CekxGcnqnJ6osfY4Rrq7W5ogFtR54KUvz4H16XzaQuukMFZCGebEpVznfq4yFcKEmYyShwj2UKjL7CazuNSuhdkofF4mHabHkLxCMVvsqG" ) # If we set session id in Initialize to None, the cache will be cleared # and Trezor will ask for the passphrase again. response = client.call_raw(messages.Initialize(session_id=None)) assert isinstance(response, messages.Features) xpub = _get_xpub(client, passphrase="A") assert ( xpub == "xpub6CekxGcnqnJ6osfY4Rrq7W5ogFtR54KUvz4H16XzaQuukMFZCGebEpVznfq4yFcKEmYyShwj2UKjL7CazuNSuhdkofF4mHabHkLxCMVvsqG" ) # Unknown session id is the same as setting it to None. response = client.call_raw(messages.Initialize(session_id=b"X" * 32)) assert isinstance(response, messages.Features) xpub = _get_xpub(client, passphrase="A") assert ( xpub == "xpub6CekxGcnqnJ6osfY4Rrq7W5ogFtR54KUvz4H16XzaQuukMFZCGebEpVznfq4yFcKEmYyShwj2UKjL7CazuNSuhdkofF4mHabHkLxCMVvsqG" ) @pytest.mark.skip_t1 # TODO @pytest.mark.skip_ui @pytest.mark.setup_client() def test_session_enable_passphrase(client): # Let's start the communication by calling Initialize. response = client.call_raw(messages.Initialize()) assert isinstance(response, messages.Features) session_id = response.session_id assert len(session_id) == 32 # Trezor will not prompt for passphrase because it is turned off. xpub = _get_xpub(client, passphrase=None) assert ( xpub == "xpub6BiVtCpG9fQPxnPmHXG8PhtzQdWC2Su4qWu6XW9tpWFYhxydCLJGrWBJZ5H6qTAHdPQ7pQhtpjiYZVZARo14qHiay2fvrX996oEP42u8wZy" ) # Turn on passphrase. _enable_passphrase(client) # The session id is unchanged, therefore we do not prompt for the passphrase. response = client.call_raw(messages.Initialize(session_id=session_id)) xpub = _get_xpub(client, passphrase=None) assert isinstance(response, messages.Features) assert session_id == response.session_id assert ( xpub == "xpub6BiVtCpG9fQPxnPmHXG8PhtzQdWC2Su4qWu6XW9tpWFYhxydCLJGrWBJZ5H6qTAHdPQ7pQhtpjiYZVZARo14qHiay2fvrX996oEP42u8wZy" ) # We clear the session id now, so the passphrase should be asked. response = client.call_raw(messages.Initialize()) xpub = _get_xpub(client, passphrase="A") assert isinstance(response, messages.Features) assert session_id != response.session_id assert ( xpub == "xpub6CekxGcnqnJ6osfY4Rrq7W5ogFtR54KUvz4H16XzaQuukMFZCGebEpVznfq4yFcKEmYyShwj2UKjL7CazuNSuhdkofF4mHabHkLxCMVvsqG" ) @pytest.mark.skip_t1 @pytest.mark.skip_ui @pytest.mark.setup_client() def test_passphrase_always_on_device(client): # Let's start the communication by calling Initialize. response = client.call_raw(messages.Initialize()) assert isinstance(response, messages.Features) session_id = response.session_id # Turn on passphrase. _enable_passphrase(client) # Force passphrase entry on Trezor. response = client.call_raw(messages.ApplySettings(passphrase_always_on_device=True)) assert isinstance(response, messages.ButtonRequest) # confirm dialog client.debug.press_yes() response = client.call_raw(messages.ButtonAck()) assert isinstance(response, messages.Success) # Since we enabled the always_on_device setting, Trezor will send ButtonRequests and ask for it on the device. response = client.call_raw( messages.GetPublicKey(address_n=parse_path("44'/0'/0'"), coin_name="Bitcoin") ) assert isinstance(response, messages.ButtonRequest) client.debug.input("") # Input empty passphrase. response = client.call_raw(messages.ButtonAck()) assert isinstance(response, messages.PublicKey) assert ( response.xpub == "xpub6BiVtCpG9fQPxnPmHXG8PhtzQdWC2Su4qWu6XW9tpWFYhxydCLJGrWBJZ5H6qTAHdPQ7pQhtpjiYZVZARo14qHiay2fvrX996oEP42u8wZy" ) # Passphrase will not be prompted. The session id stays the same and the passphrase is cached. response = client.call_raw(messages.Initialize(session_id=session_id)) assert isinstance(response, messages.Features) response = client.call_raw( messages.GetPublicKey(address_n=parse_path("44'/0'/0'"), coin_name="Bitcoin") ) assert isinstance(response, messages.PublicKey) assert ( response.xpub == "xpub6BiVtCpG9fQPxnPmHXG8PhtzQdWC2Su4qWu6XW9tpWFYhxydCLJGrWBJZ5H6qTAHdPQ7pQhtpjiYZVZARo14qHiay2fvrX996oEP42u8wZy" ) # In case we want to add a new passphrase we need to send session_id = None. response = client.call_raw(messages.Initialize(session_id=None)) assert isinstance(response, messages.Features) response = client.call_raw( messages.GetPublicKey(address_n=parse_path("44'/0'/0'"), coin_name="Bitcoin") ) assert isinstance(response, messages.ButtonRequest) client.debug.input("A") # Input empty passphrase. response = client.call_raw(messages.ButtonAck()) assert isinstance(response, messages.PublicKey) assert ( response.xpub == "xpub6CekxGcnqnJ6osfY4Rrq7W5ogFtR54KUvz4H16XzaQuukMFZCGebEpVznfq4yFcKEmYyShwj2UKjL7CazuNSuhdkofF4mHabHkLxCMVvsqG" )