Re:SSH Agent Explained
by rkeene2 on Wednesday May 20, 2020 @10:35PM
(#23254295)
If you're going the Smart card route you can get the PIVKey C910 on Amazon for $15/ea. in quantities of 1. You can also buy them for about $0.10/ea on AliExpress, and then load CoolKey or some other applet.
[ Parent
| on HN ]
Re:SSH Agent Explained
by closeparen on Wednesday May 20, 2020 @11:09PM
(#23254468)
>Platform Support
>Windows In-Box PIV Driver (Read Only) and PIVkey Windows Minidriver (Read/Write): Windows Vista, 7, 8, Server 2003, Server 2008, Server 2012.
>Mac OSX, Linux and Android (Read Only - Middleware Required)
The only open source middleware I know of for OSX is OpenSC, and it doesn't list C910 as a supported card.
https://github.com/OpenSC/OpenSC/wiki/Supported-hardware-(sm...
I forgot to mention that also, of course, CoolKey is open source and the CoolKey PKCS#11 module supports the CoolKey applet (obviously) and makes some attempts to support the US DOD CAC and the US Government PIV -- though I don't know how successful they are. Bugs and feature limitations in CoolKey led me to write CACKey.
Re:SSH Agent Explained
by closeparen on Thursday May 21, 2020 @04:02PM
(#23264258)
Coolkey is trying to link OSX 10.5 libraries and cross-compile for PowerPC. Seems like abandonware. Are you using it successfully in 2020?
I mostly use CACKey, since I wrote it to replace CoolKey for my needs.
The PIVKey C910 complies with NIST SP-800-73 (PIV) -- same as YubiKey PIV mode, so OpenSC supports it. Also, the middleware I wrote (CACKey) is open source and supports it and works on macOS as a tokend driver.