Show HN: Yubikey-agent – an easy to use Go ssh-agent for YubiKeys

Re:Show HN: Yubikey-agent – an easy to use Go ssh-agent for ... by fidelramos on Sunday May 10, 2020 @03:48AM (#23130994)

I want to mention a Yubikey alternative that runs on open-source firmware and software: OnlyKey [1]

It has an onlykey-agent that works as an SSH agent [2]. It doesn't work as a GPG agent yet though, they are reportedly working on it.

[1] https://onlykey.io/ [2] https://docs.crp.to/onlykey-agent.html

[ Parent | on HN ]

Re:Show HN: Yubikey-agent – an easy to use Go ssh-agent for ... by danieldk on Sunday May 10, 2020 @03:59AM (#23131039)

You may want to read the recent discussion on HN about OnlyKey before using one:

https://news.ycombinator.com/item?id=21884184

[ Parent | on HN ]

Re:Show HN: Yubikey-agent – an easy to use Go ssh-agent for ... by fidelramos on Sunday May 10, 2020 @04:58AM (#23131257)

Thank you very much for the link, I missed that discussion. I had no idea the security of OnlyKey was so terrible, in light of this I will stop recommending it.

[ Parent | on HN ]

Re:Show HN: Yubikey-agent – an easy to use Go ssh-agent for ... by StavrosK on Sunday May 10, 2020 @07:57AM (#23131962)

I'm really excited about the next SoloKey coming out soon.

[ Parent | on HN ]

Re:Show HN: Yubikey-agent – an easy to use Go ssh-agent for ... by fidelramos on Sunday May 10, 2020 @08:46AM (#23132184)

Thank you for the alternative. Sadly it doesn't support SSH or GPG keys, does it? That was one of the selling points of the OnlyKey for me (and it being open source of course).

[ Parent | on HN ]

Re:Show HN: Yubikey-agent – an easy to use Go ssh-agent for ... by jabart on Sunday May 10, 2020 @10:09AM (#23132680)

Based on their blog post they are working on supporting PIV / PKCS#11 which would support SSH Keys and AES operations.

https://solokeys.com/blogs/news/update-on-our-new-and-upcomi...

[Edit removed it to be more specific]

[ Parent | on HN ]

Re:Show HN: Yubikey-agent – an easy to use Go ssh-agent for ... by StavrosK on Sunday May 10, 2020 @08:57AM (#23132261)

I'm not sure if they will support those yet. I could never get SSH working well, whereas SSH with U2F works perfectly (and they do support that). I'm guessing they will add GPG key integration, as once the key can perform crypto operations, it's just a matter of host software.

[ Parent | on HN ]

Re:Show HN: Yubikey-agent – an easy to use Go ssh-agent for ... by cr7pt0 on Friday May 15, 2020 @11:29AM (#23193308)

Make sure you read down on this thread https://news.ycombinator.com/item?id=21884184 there is a lot of misinformation in the top posts that are completely debunked if you read down. Like someone said OnlyKey is an Arduino which its not and that it doesn't have hardware security which it does. You can find full list of hardware security features here - https://docs.crp.to/security.html

[ Parent | on HN ]