diff --git a/trezor_agent/gpg/debug_subkeys.py b/trezor_agent/gpg/debug_subkeys.py deleted file mode 100644 index a9aff80..0000000 --- a/trezor_agent/gpg/debug_subkeys.py +++ /dev/null @@ -1,43 +0,0 @@ -#!/usr/bin/env python -"""Check GPG v2 signature for a given public key.""" -import argparse -import logging - -from . import decode -from .. import util - -log = logging.getLogger(__name__) - - -def main(): - """Main function.""" - p = argparse.ArgumentParser() - p.add_argument('pubkey') - p.add_argument('-v', '--verbose', action='store_true', default=False) - args = p.parse_args() - logging.basicConfig(level=logging.DEBUG if args.verbose else logging.INFO, - format='%(asctime)s %(levelname)-10s %(message)s') - stream = open(args.pubkey, 'rb') - parser = decode.parse_packets(util.Reader(stream)) - pubkey, userid, sig1, subkey, sig2 = parser - - digest = decode.digest_packets([pubkey, userid, sig1]) - assert sig1['hash_prefix'] == digest[:2] - decode.verify_digest( - pubkey=pubkey, digest=digest, - signature=sig1['sig'], label='GPG public key (self sig)') - - digest = decode.digest_packets([pubkey, subkey, sig2]) - assert sig2['hash_prefix'] == digest[:2] - decode.verify_digest( - pubkey=pubkey, digest=digest, - signature=sig2['sig'], label='GPG subkey (1st sig)') - - sig3, = sig2['embedded'] - digest = decode.digest_packets([pubkey, subkey, sig3]) - decode.verify_digest( - pubkey=subkey, digest=digest, - signature=sig3['sig'], label='GPG subkey (2nd sig)') - -if __name__ == '__main__': - main() diff --git a/trezor_agent/gpg/demo.sh b/trezor_agent/gpg/demo.sh deleted file mode 100755 index cf44a61..0000000 --- a/trezor_agent/gpg/demo.sh +++ /dev/null @@ -1,19 +0,0 @@ -#!/bin/bash -set -x -CREATED=1460731897 # needed for consistent public key creation -NAME="trezor_demo" # will be used as GPG user id and public key name - -echo "Hello GPG World!" > EXAMPLE -# Create, sign and export the public key -trezor-gpg $NAME --time $CREATED -o $NAME.pub - -# Install GPG v2.1 (modern) and import the public key -gpg2 --import $NAME.pub -gpg2 --list-keys $NAME -# gpg2 --edit-key $NAME trust # optional: mark it as trusted - -# Perform actual GPG signature using TREZOR device -trezor-gpg $NAME EXAMPLE - -# Verify signature using GPG2 binary -gpg2 --verify EXAMPLE.sig diff --git a/trezor_agent/gpg/test.sh b/trezor_agent/gpg/test.sh deleted file mode 100644 index d80c208..0000000 --- a/trezor_agent/gpg/test.sh +++ /dev/null @@ -1,16 +0,0 @@ -# NEVER RUN ON YOUR OWN REAL GPG KEYS!!!!! THEY WILL BE DELETED!!!!! -set -x -e -u -CURVE=ed25519 -#CURVE=nist256p1 -(cd ~/.gnupg && rm -rf openpgp-revocs.d/ private-keys-v1.d/ pubring.kbx* trustdb.gpg /tmp/log *.gpg; killall gpg-agent || true) -gpg2 --full-gen-key --expert -gpg2 --export > romanz.pub -NOW=`date +%s` -USERID="Roman Zeyde " -trezor-gpg -t $NOW -e $CURVE --subkey "$USERID" -o subkey.pub -gpg2 -K -gpg2 -v --import <(cat romanz.pub subkey.pub) -gpg2 -K - -trezor-gpg -t $NOW -e $CURVE "$USERID" EXAMPLE -gpg2 --verify EXAMPLE.sig