News for hackers. Stuff that matters.

A comment on Protecting SSH Keys with macOS Secure Enclave.

Re:Protecting SSH Keys with macOS Secure Enclave by computerfriend on Wednesday November 11, 2026 @02:49AM (#50450776)
> That ssh: at the end is the FIDO2 application ID — it’s part of the key, not a comment.

I think this is incorrect and the "ssh:" at the end is indeed a comment.

[ Parent | on HN ]
Re:Protecting SSH Keys with macOS Secure Enclave by gatezh on Wednesday November 11, 2026 @10:42AM (#50454729)
You're right, thanks. The trailing ssh: is the comment: changing or removing it leaves the fingerprint the same. The FIDO application ID is also encoded inside the key blob, and it's also "ssh:", which is what confused me. I'll fix the post.
[ Parent | on HN ]