Using TREZOR as a hardware SSH/GPG agent

See SatoshiLabs' blog posts about this feature:

• TREZOR Firmware 1.3.4 enables SSH login
• TREZOR Firmware 1.3.6 — GPG Signing, SSH Login Updates and Advanced Transaction Features for Segwit
• TREZOR Firmware 1.4.0 — GPG decryption support

Installation

First, make sure that the latest trezorlib Python package is installed correctly (at least v0.6.6):

$ apt-get install python-dev libusb-1.0-0-dev libudev-dev
$ pip install -U setuptools
$ pip install Cython trezor

Make sure that your udev rules are configured correctly. Then, install the latest trezor_agent package:

$ pip install trezor_agent

Or, directly from the latest source code (if pip doesn't work for you):

$ git clone https://github.com/romanz/trezor-agent && cd trezor-agent
$ python setup.py build && python setup.py install

Finally, verify that you are running the latest TREZOR firmware version (at least v1.4.0):

$ trezorctl get_features | head
vendor: "bitcointrezor.com"
major_version: 1
minor_version: 4
patch_version: 0
...

If you have an error regarding protobuf imports (after installing it), please see this issue.

Usage

For SSH, see the following instructions (for Windows support, see trezor-ssh-agent project (by Martin Lízner)).

For GPG, see the following instructions.

See here for PIN entering instructions.

Troubleshooting

If there is an import problem with the installed protobuf package, see this issue for fixing it.

Gitter

Questions, suggestions and discussions are welcome: