mirror of
https://github.com/trezor/trezor-firmware.git
synced 2024-12-22 22:38:08 +00:00
76 lines
1.5 KiB
C
76 lines
1.5 KiB
C
#include <string.h>
|
|
|
|
#include "bip39.h"
|
|
#include "hmac.h"
|
|
#include "rand.h"
|
|
#include "sha2.h"
|
|
#include "pbkdf2.h"
|
|
#include "bip39_english.h"
|
|
|
|
#define PBKDF2_ROUNDS 2048
|
|
|
|
const char *mnemonic_generate(int strength)
|
|
{
|
|
int i;
|
|
static uint32_t data[16];
|
|
if (strength % 32 || strength < 128 || strength > 256) {
|
|
return 0;
|
|
}
|
|
for (i = 0; i < 16; i++) {
|
|
data[i] = random32();
|
|
}
|
|
return mnemonic_from_data((const uint8_t *)data, strength / 8);
|
|
}
|
|
|
|
const char *mnemonic_from_data(const uint8_t *data, int len)
|
|
{
|
|
int i, j;
|
|
static uint8_t hash[32];
|
|
static char bits[256 + 8];
|
|
static char mnemo[24 * 10];
|
|
|
|
if (len % 4 || len < 16 || len > 32) {
|
|
return 0;
|
|
}
|
|
|
|
SHA256_Raw((const uint8_t *)data, len, hash);
|
|
|
|
for (i = 0; i < len; i++) {
|
|
for (j = 0; j < 8; j++) {
|
|
bits[8 * i + j] = (data[i] & (1 << (7 - j))) > 0;
|
|
}
|
|
}
|
|
|
|
char hlen = len / 4;
|
|
for (i = 0; i < hlen; i++) {
|
|
char c = (hash[0] & (1 << (7 - i))) > 0;
|
|
bits[8 * len + i] = c;
|
|
}
|
|
|
|
int mlen = len * 3 / 4;
|
|
|
|
char *p = mnemo;
|
|
for (i = 0; i < mlen; i++) {
|
|
int idx = 0;
|
|
for (j = 0; j < 11; j++) {
|
|
idx += bits[i * 11 + j] << (10 - j);
|
|
}
|
|
strcpy(p, wordlist[idx]);
|
|
p += strlen(wordlist[idx]);
|
|
*p = (i < mlen - 1) ? ' ' : 0;
|
|
p++;
|
|
}
|
|
|
|
return mnemo;
|
|
}
|
|
|
|
void mnemonic_to_seed(const char *mnemonic, const char *passphrase, uint8_t seed[512 / 8])
|
|
{
|
|
static uint8_t salt[8 + 256 + 4];
|
|
int saltlen = strlen(passphrase);
|
|
memcpy(salt, "mnemonic", 8);
|
|
memcpy(salt + 8, passphrase, saltlen);
|
|
saltlen += 8;
|
|
pbkdf2((const uint8_t *)mnemonic, strlen(mnemonic), salt, saltlen, PBKDF2_ROUNDS, seed, 512 / 8);
|
|
}
|