Secretive – macOS native app to store SSH keys in the Secure Enclave

Re:Secretive – macOS native app to store SSH keys in the Sec... by AlexCoventry on Saturday June 27, 2020 @04:43PM (#23664525)

Is a similar service available for yubikeys connected to linux machines?

[ Parent | on HN ]

Re:Secretive – macOS native app to store SSH keys in the Sec... by vladvasiliu on Saturday June 27, 2020 @04:54PM (#23664616)

There is:

https://www.esev.com/blog/post/2015-01-pgp-ssh-key-on-yubike...

https://developers.yubico.com/PIV/Guides/SSH_with_PIV_and_PK...

The yubikey (at least some models) can work as a smartcard.

[ Parent | on HN ]

Re:Secretive – macOS native app to store SSH keys in the Sec... by AlexCoventry on Saturday June 27, 2020 @05:31PM (#23664846)

Thanks.

[ Parent | on HN ]

Re:Secretive – macOS native app to store SSH keys in the Sec... by g_p on Saturday June 27, 2020 @05:33PM (#23664859)

Yes - as the other commenter mentioned there are some docs from Yubico. Also worth looking at PKCS11, as this lets you do HTTPS clent certificate authentication, as well as SSH. And it's all standardised too under the PKCS11 standard, which is nice for portability or diversity of token providers.

[ Parent | on HN ]