This is an app that provides a piece of entropy from secret stored on your nano ledger. this entropy can be used for example to:

• deterministically derive pub/priv key pair that you can use to transact on ethereum/bitcoin networks
• a piece of entropy that you can use as your keepass password

and in all other cases where you do not want to store your secret values and you are fine with keeping them in memory for shorter or longer time. please note that signing/verification is not done on nano itself.

• a node secret is derived from master secret (expoent and chaincode parts) for derivation path provided
• public key is derived from exponent
• public key and chaincode is returned and used as master secret for completely new root bip32 node
• from this entropy a public and private key are created

• run entropy app
• every app can set USB device data (can pretend to be any device)
• wait for usb to settle, here is how it looks to lsusb Bus 001 Device 049: ID 2c97:0001
• run test.py and do what it says
• it runs inside container if you map usb correctly. if you run container in VM then you need to filter proper USB device into VM

docker build . -t neufund/nano
docker run -it --rm --privileged -v /dev/bus/usb:/dev/bus/usb neufund/nano python test.py

nano_utils/nano.py contains all you need also see examples: keepass.py and test.py

how to run entropy app clients?

virtualenv nano
source nano/bin/activate
activate venv nano

install secp256k1 as described here https://github.com/LedgerHQ/blue-loader-python for more details check Dockerfile, if you install on ubuntu replace following library names (container builds on alpine) libusb-dev == libusb-1.0-0.dev eudev-dev == libudev-dev

we also were successfull with running nano client from raspberry pi 3

start here: https://github.com/LedgerHQ/ledger-nano-s

when cloning Nano SDK, checkout tag that corresponds to your Nano's firmware

There is a docker container with customized gcc and clang compilers, if not install following dependency sudo apt-get install libc6-dev-i386 and follow guidelines

export BOLOS_ENV=/home/rudolfix/src/nano/blue-devenv
export BOLOS_SDK=/home/rudolfix/src/nano/nanos-secure-sdk

• make sure you use correct firmware tag in nanos-secure-sdk
• make sure you use correct version of compilers in blue-devenv for your firmware version

token.hex is included and may be deployed without main.c compilation check Makefile for load and delete targets

ledger provides a sample makefile, a few things must be set APPNAME = Entropy TARGET_ID = 0x31100002 #Nano S ICON_FILE = icon_bw.gif APP_LOAD_PARAMS=--appFlags 0x40

if invalid target is set, you'll get Exception : Invalid status 6484 more on app programing here http://ledger.readthedocs.io/en/latest/bolos/introduction.html os headers: https://github.com/LedgerHQ/blue-secure-sdk/blob/master/include/os.h

• create 16x16 bw gif
• execute python icon.py 16 16 <icon name> hexbitmaponly
• local icon.py is modified by me to run on python3
• replace in --icon for load target
• when drawing icon leave 2px frame around your stuff