Re:When Your Smart ID Card Reader Comes With Malware
by tialaramex on Wednesday May 18, 2022 @04:53AM
(#31420568)
> at least not without defining a new signature algorithm OID
Yes, that's what you would need to do if you wanted this.
OpenSSH comes with tooling that will sign arbitrary files, and can use either conventional SSH key files (for which it has a safety rationale, explaining why this can't weaken their security for their original authentication purpose if the signature algorithm works as intended) or a FIDO device.
Yes, that's what you would need to do if you wanted this.
OpenSSH comes with tooling that will sign arbitrary files, and can use either conventional SSH key files (for which it has a safety rationale, explaining why this can't weaken their security for their original authentication purpose if the signature algorithm works as intended) or a FIDO device.