4 ms·
the entire point of agents is that they DON'T just hand you key plaintext, otherwise what would the point of them be compared to just an un-encrypted file. ssh
by throwaway2048 8y ago
the entire point of agents is that they DON'T just hand you key plaintext, otherwise what would the point of them be compared to just an un-encrypted file.
ssh-agent signs requests, tokens, etc on your behalf. You never see the private key.
- Arnavion 8y ago... which is why the blog post is about figuring out how to decrypt the underlying storage that ssh-agent reads from to get to the private key. Edit: If your point was specifically about this from EvanAnderson's comment >A user needs to be able to retrieve the plaintext of their SSH private keys. then the "user" there is the abstract identity used to locate and decrypt the private key, not the human invoking ssh-agent.