Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SLIP-xxx signing data with trezor #409

Open
jakubtrnka opened this issue Oct 21, 2018 · 0 comments
Open

SLIP-xxx signing data with trezor #409

jakubtrnka opened this issue Oct 21, 2018 · 0 comments

Comments

@jakubtrnka
Copy link

I'd appreciate if trezor command line tool supported signing of (big) files, e. g. Virtual Machine images.
AFAIK right now this goal can be achieved in multiple ways:

  1. by setting up Trezor-agent for GPG and sign traditionally via GPG
  2. by manually hashing the file and signing the hash via trezorctl sign-message
  3. by some other already existing method I'm not aware of

Signing via trezorctl is more lightweight and preferable to me, since, for example, it can be easily and quickly performed from freshly created Python-virtual-environment that may be destroyed right after that.

Problem with point nr. 2 is, there is still too much freedom. I have to specify BIP32 key derivation path, coin and script-type. None of those features are relevant for this purpose.

Therefore I suggest to create another SLIP for this.

Trivial solution may be, for example, to use directly BIP39 seed generated using PBKDF2 with different salt (instead of "mnemonic + passphrase" use, say, "trezor signed data").

Or may involve some more complex operation using HD-features that are either deterministic or that would be dumped as part of the signature metadata.

Ideas?

@satoshilabs satoshilabs deleted a comment from LisaBurke40 Oct 15, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant