News for hackers. Stuff that matters.

A comment on Show HN: ssh-tpm-agent – SSH agent for TPMs.

Re:Show HN: ssh-tpm-agent – SSH agent for TPMs by cryptonector on Sunday July 30, 2023 @12:07AM (#36927714)
The idea is awesome. I'm going to have to try it out. It'd be cool if ssh-keysign could use this agent!
[ Parent | on HN ]
Re:Show HN: ssh-tpm-agent – SSH agent for TPMs by Foxboron on Sunday July 30, 2023 @08:24AM (#36930459)
Apparently you can use a ssh-agent for HostKeys, and by extension ssh-keysign.

So I think this should be trivial to implement actually.

It might be cool to add some attestation feature so you can verify the boot of the machine before releasing the host keys. Might be practical in scenarios where you are SSHing into an initrd or a sensitive remote host.

[ Parent | on HN ]