mirror of
https://github.com/romanz/amodem.git
synced 2026-04-21 05:36:42 +08:00
Remove trailing whitespace
git ls-files | xargs -n1 sed -e's/[[:space:]]*$//' -i
This commit is contained in:
@@ -12,11 +12,11 @@ So when you `ssh` to a machine - rather than consult the normal ssh-agent (which
|
|||||||
|
|
||||||
## Key Naming
|
## Key Naming
|
||||||
|
|
||||||
`trezor-agent` goes to great length to avoid using the valuable parent key.
|
`trezor-agent` goes to great length to avoid using the valuable parent key.
|
||||||
|
|
||||||
The rationale behind this is that `trezor-agent` is to some extent condemned to *blindly* signing any NONCE given to it (e.g. as part of a challenge respone, or as the hash/hmac of someting to sign).
|
The rationale behind this is that `trezor-agent` is to some extent condemned to *blindly* signing any NONCE given to it (e.g. as part of a challenge respone, or as the hash/hmac of someting to sign).
|
||||||
|
|
||||||
And doing so with the master private key is risky - as rogue (ssh) server could possibly provide a doctored NONCE that happens to be tied to a transaction or something else.
|
And doing so with the master private key is risky - as rogue (ssh) server could possibly provide a doctored NONCE that happens to be tied to a transaction or something else.
|
||||||
|
|
||||||
It therefore uses only derived child keys pairs instead (according to the [BIP-0032: Hierarchical Deterministic Wallets][1] system) - and ones on different leafs. So the parent key is only used within the device for creating the child keys - and not exposed in any way to `trezor-agent`.
|
It therefore uses only derived child keys pairs instead (according to the [BIP-0032: Hierarchical Deterministic Wallets][1] system) - and ones on different leafs. So the parent key is only used within the device for creating the child keys - and not exposed in any way to `trezor-agent`.
|
||||||
|
|
||||||
@@ -26,7 +26,7 @@ It is common for SSH users to use one (or a few) private keys with SSH on all se
|
|||||||
|
|
||||||
So taking a commmand such as:
|
So taking a commmand such as:
|
||||||
|
|
||||||
$ trezor-agent -c user@fqdn.com
|
$ trezor-agent -c user@fqdn.com
|
||||||
|
|
||||||
The `trezor-agent` will take the `user`@`fqdn.com`; canonicalise it (e.g. to add the ssh default port number if none was specified) and then apply some simple hashing (See [SLIP-0013 : Authentication using deterministic hierarchy][2]). The resulting 128bit hash is then used to construct a lead 'HD node' that contains an extened public private *child* key.
|
The `trezor-agent` will take the `user`@`fqdn.com`; canonicalise it (e.g. to add the ssh default port number if none was specified) and then apply some simple hashing (See [SLIP-0013 : Authentication using deterministic hierarchy][2]). The resulting 128bit hash is then used to construct a lead 'HD node' that contains an extened public private *child* key.
|
||||||
|
|
||||||
@@ -42,10 +42,10 @@ Note: Keepkey does not support en-/de-cryption at this time.
|
|||||||
|
|
||||||
### Index
|
### Index
|
||||||
|
|
||||||
The canonicalisation process ([SLIP-0013][2] and [SLIP-0017][3]) of an email address or ssh address allows for the mixing in of an extra 'index' - a unsigned 32 bit number. This allows one to have multiple, different keys, for the same address.
|
The canonicalisation process ([SLIP-0013][2] and [SLIP-0017][3]) of an email address or ssh address allows for the mixing in of an extra 'index' - a unsigned 32 bit number. This allows one to have multiple, different keys, for the same address.
|
||||||
|
|
||||||
This feature is currently not used -- it is set to '0'. This may change in the future.
|
This feature is currently not used -- it is set to '0'. This may change in the future.
|
||||||
|
|
||||||
[1]: https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki
|
[1]: https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki
|
||||||
[2]: https://github.com/satoshilabs/slips/blob/master/slip-0013.md
|
[2]: https://github.com/satoshilabs/slips/blob/master/slip-0013.md
|
||||||
[3]: https://github.com/satoshilabs/slips/blob/master/slip-0017.md
|
[3]: https://github.com/satoshilabs/slips/blob/master/slip-0017.md
|
||||||
|
|||||||
@@ -33,7 +33,7 @@ If you are using python3 or your system `pip` command points to `pip3.x`
|
|||||||
dependencies instead:
|
dependencies instead:
|
||||||
|
|
||||||
$ zypper install python3-pip python3-devel python3-tk libusb-1_0-devel libudev-devel
|
$ zypper install python3-pip python3-devel python3-tk libusb-1_0-devel libudev-devel
|
||||||
|
|
||||||
##### macOS
|
##### macOS
|
||||||
|
|
||||||
There are many different options to install python environment on macOS ([official](https://www.python.org/downloads/mac-osx/), [anaconda](https://conda.io/docs/user-guide/install/macos.html), ..). Most importantly you need `libusb`. Probably the easiest way is via [homebrew](https://brew.sh/)
|
There are many different options to install python environment on macOS ([official](https://www.python.org/downloads/mac-osx/), [anaconda](https://conda.io/docs/user-guide/install/macos.html), ..). Most importantly you need `libusb`. Probably the easiest way is via [homebrew](https://brew.sh/)
|
||||||
@@ -76,7 +76,7 @@ gpg (GnuPG) 2.1.15
|
|||||||
$ git clone https://github.com/romanz/trezor-agent
|
$ git clone https://github.com/romanz/trezor-agent
|
||||||
$ pip3 install --user -e trezor-agent/agents/trezor
|
$ pip3 install --user -e trezor-agent/agents/trezor
|
||||||
```
|
```
|
||||||
|
|
||||||
Or, through Homebrew on macOS:
|
Or, through Homebrew on macOS:
|
||||||
|
|
||||||
```
|
```
|
||||||
@@ -95,9 +95,9 @@ Then, install the latest [keepkey_agent](https://pypi.python.org/pypi/keepkey_ag
|
|||||||
```
|
```
|
||||||
$ pip3 install keepkey_agent
|
$ pip3 install keepkey_agent
|
||||||
```
|
```
|
||||||
|
|
||||||
Or, on Mac using Homebrew:
|
Or, on Mac using Homebrew:
|
||||||
|
|
||||||
```
|
```
|
||||||
$ homebrew install keepkey-agent
|
$ homebrew install keepkey-agent
|
||||||
```
|
```
|
||||||
|
|||||||
Reference in New Issue
Block a user