From 3c1c1d0e0c4b6ac9ef3a6c74d411a0272c4d3609 Mon Sep 17 00:00:00 2001
From: Roman Zeyde <roman.zeyde@gmail.com>
Date: Tue, 23 Jun 2015 08:59:10 +0300
Subject: [PATCH] trezor: explicit hardened derivation

---
 sshagent/trezor.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/sshagent/trezor.py b/sshagent/trezor.py
index 67f3e90..a2ed9eb 100644
--- a/sshagent/trezor.py
+++ b/sshagent/trezor.py
@@ -79,8 +79,9 @@ def _get_address(ident):
     digest = formats.hashfunc(addr).digest()
     s = io.BytesIO(bytearray(digest))
 
+    hardened = 0x80000000
     address_n = [22] + list(util.recv(s, '<LLLL'))
-    return [-a for a in address_n]  # prime each address component
+    return [(hardened | value) for value in address_n]
 
 
 def _parse_ssh_blob(data):