3 ms·
I would love to hear from someone who knows the answer to this. Does this affect ssh-agent? I am rotating my keys regardless, but I am curious.
by singlow 11y ago
I would love to hear from someone who knows the answer to this. Does this affect ssh-agent? I am rotating my keys regardless, but I am curious.
- TimWolla 11y agoAccording to: https://news.ycombinator.com/item?id=10902833 https://news.ycombinator.com/item?id=10902833 it does not: > Finally, for these three reasons, passphrase-encrypted SSH keys are leaked in their encrypted form, but an attacker may attempt to crack the passphrase offline. On the other hand, SSH keys that are available only through an authentication agent are never leaked, in any form.