blob42/trezor-agent
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
Hardware-based SSH/PGP agent
151 Commits 4 Branches 40 Tags 56 MiB
Python 99.9%
1a5b8118ad
Go to file
Roman Zeyde 1a5b8118ad setup.py: support for Python 3.4
2016-01-05 20:46:55 +02:00
trezor_agent test_protocol: fix bytes->str 2016-01-04 21:03:46 +02:00
.gitignore Initial commit 2015-06-06 17:42:48 +03:00
.pylintrc trezor: add support for Ed25519 SSH keys 2015-10-27 19:49:30 +02:00
.travis.yml Fix a few pylint issues 2016-01-04 19:21:56 +02:00
LICENSE Initial commit 2015-06-06 17:42:48 +03:00
README.md README: fixup license to match the repository 2016-01-05 18:49:49 +02:00
setup.py setup.py: support for Python 3.4 2016-01-05 20:46:55 +02:00
tox.ini tox: add py34 2016-01-04 21:03:27 +02:00

README.md

Using TREZOR as a hardware SSH agent

Build Status Python Versions Package Version Development Status Downloads License

See SatoshiLabs' blog post about this feature:

Screencast demo usage

Demo

Installation

First, make sure that the latest trezorlib Python package is installed correctly (at least v0.6.6):

$ pip install Cython trezor

Then, install the latest trezor_agent package:

$ pip install trezor_agent

Finally, verify that you are running the latest TREZOR firmware version (at least v1.3.4):

$ trezorctl get_features
vendor: "bitcointrezor.com"
major_version: 1
minor_version: 3
patch_version: 4
...

Public key generation

Run:

/tmp $ trezor-agent ssh.hostname.com -v > hostname.pub
2015-09-02 15:03:18,929 INFO         getting "ssh://ssh.hostname.com" public key from Trezor...
2015-09-02 15:03:23,342 INFO         disconnected from Trezor
/tmp $ cat hostname.pub
ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBGSevcDwmT+QaZPUEWUUjTeZRBICChxMKuJ7dRpBSF8+qt+8S1GBK5Zj8Xicc8SHG/SE/EXKUL2UU3kcUzE7ADQ= ssh://ssh.hostname.com

Append hostname.pub contents to ~/.ssh/authorized_keys configuration file at ssh.hostname.com, so the remote server would allow you to login using the corresponding private key signature.

Usage

Run:

/tmp $ trezor-agent ssh.hostname.com -v -c
2015-09-02 15:09:39,782 INFO         getting "ssh://ssh.hostname.com" public key from Trezor...
2015-09-02 15:09:44,430 INFO         please confirm user "roman" login to "ssh://ssh.hostname.com" using Trezor...
2015-09-02 15:09:46,152 INFO         signature status: OK
Linux lmde 3.16.0-4-amd64 #1 SMP Debian 3.16.7-ckt11-1+deb8u3 (2015-08-04) x86_64

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Tue Sep  1 15:57:05 2015 from localhost
~ $

Make sure to confirm SSH signature on the Trezor device when requested.