mmgen-wallet/mmgen-passchg

#!/usr/bin/env python
#
# mmgen = Multi-Mode GENerator, command-line Bitcoin cold storage solution
# Copyright (C) 2013-2014 by philemon <mmgen-py@yandex.com>
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
"""
mmgen-passchg: Change a mmgen deterministic wallet's passphrase, label or
               hash preset
"""

import sys
from mmgen.Opts import *
from mmgen.util import *
from mmgen.crypto import *
import mmgen.config as g

help_data = {
	'prog_name': g.prog_name,
	'desc':  """Change the passphrase, hash preset or label of an {}
                  deterministic wallet""".format(g.proj_name),
	'usage':   "[opts] [filename]",
	'options': """
-h, --help                Print this help message
-d, --outdir=           d Specify an alternate directory 'd' for output
-H, --show-hash-presets   Show information on available hash presets
-k, --keep-old-passphrase Keep old passphrase (use when changing hash
                          strength or label only)
-L, --label=            l Change the wallet's label to 'l'
-p, --hash-preset=      p Change scrypt.hash() parameters to preset 'p'
                          (default: '{g.hash_preset}')
-P, --passwd-file=      f Get new passphrase from file 'f'
-r, --usr-randchars=    n Get 'n' characters of additional randomness from
                          user (min={g.min_urandchars}, max={g.max_urandchars})
-q, --quiet               Suppress warnings; overwrite files without
                          prompting
-v, --verbose             Produce more verbose output
""".format(g=g),
	'notes': """

NOTE: The key ID will change if either the passphrase or hash preset are
      changed
"""
}

opts,cmd_args = parse_opts(sys.argv,help_data)

if 'quiet' in opts: g.quiet = True
if 'verbose' in opts: g.verbose = True
if 'show_hash_presets' in opts: show_hash_presets()

if len(cmd_args) != 1:
	msg("One input file must be specified")
	sys.exit(2)
infile = cmd_args[0]

# Old key:
label,metadata,hash_preset,salt,enc_seed = get_data_from_wallet(infile)
seed_id,key_id = metadata[:2]

# Repeat on incorrect pw entry
prompt = "Enter %spassphrase: " % (""
		if 'keep_old_passphrase' in opts else "old ")
while True:
	passwd = get_mmgen_passphrase(prompt,{})
	key = make_key(passwd, salt, hash_preset)
	seed = decrypt_seed(enc_seed, key, seed_id, key_id)
	if seed: break

changed = {}

if 'label' in opts:
	if opts['label'] != label:
		msg("Label changed: '%s' -> '%s'" % (label, opts['label']))
		changed['label'] = True
	else:
		msg("Label is unchanged: '%s'" % (label))
else: opts['label'] = label  # Copy the old label

if 'hash_preset' in opts:
	if hash_preset != opts['hash_preset']:
		qmsg("Hash preset has changed (%s -> %s)" %
			(hash_preset, opts['hash_preset']))
		changed['preset'] = True
	else:
		msg("Hash preset is unchanged")
else:
	opts['hash_preset'] = hash_preset

if 'keep_old_passphrase' in opts:
	msg("Keeping old passphrase by user request")
else:
	new_passwd = get_new_passphrase("new passphrase", opts)

	if new_passwd == passwd:
		qmsg("Passphrase is unchanged")
	else:
		qmsg("Passphrase has changed")
		passwd = new_passwd
		changed['passwd'] = True

if 'preset' in changed or 'passwd' in changed: # Update key ID, salt
	qmsg("Will update salt and key ID")

	from hashlib import sha256

	salt = sha256(salt + get_random(128,opts)).digest()[:g.salt_len]
	key = make_key(passwd, salt, opts['hash_preset'])
	new_key_id = make_chksum_8(key)
	qmsg("Key ID changed: %s -> %s" % (key_id,new_key_id))
	key_id = new_key_id
	enc_seed = encrypt_seed(seed, key)
elif not 'label' in changed:
	msg("Data unchanged.  No file will be written")
	sys.exit(2)

write_wallet_to_file(seed, passwd, key_id, salt, enc_seed, opts)