I don't really think Secure Enclave is really increasing your security here. Your private key is always kept encrypted: - For OpenSSH - with their 16-rounds cus

I don't really think Secure Enclave is really increasing your security here. Your private key is always kept encrypted: - For OpenSSH - with their 16-rounds custom bcrypto - For OpenSSL/PCKS - with AES-256/PBDKF2 That renders your key virtually unbreakable as long as you use a reasonable password On top of that, you can only upload public - this is also secure as long you use proper crypto (RSA or Ed25519)