3 ms·

yubikeys can store GPG keys and emulate SSH keys via gpg-agent. More exciting: OpenSSL recently added full U2F/Fido support, but it might take a bit until that

yubikeys can store GPG keys and emulate SSH keys via gpg-agent. More exciting: OpenSSL recently added full U2F/Fido support, but it might take a bit until that lands in all distros https://www.undeadly.org/cgi?action=article;sid=20191115064850 https://www.undeadly.org/cgi?action=article;sid=201911150648...

danieldk 7y ago
yubikeys can store GPG keys and emulate SSH keys via gpg-agent. Indeed. Same for gnuk keys. I currently use a gnuk key (Nitrokey Start) with Ed25519 and have GPG set up as the SSH agent for SSH. Though I hope to switch to a YubiKey soon, so that I don't need a separate key for U2F/Fido2.
- Xylakant 7y ago
  I'm really looking forward to the U2F support - it's built into openssh and allows multiple ssh-keys tied to a single yubikey. The gnupg stack has become more stable, but it's always been the problematic part of the setup. The other advantage is that you can use the cheap U2F/Fido yubikeys without GPG/applet support.
jlgaddis 7y ago
> OpenSSL I know what you meant to type but, for the benefit of everyone else here, he meant OpenSSH. (Normally I wouldn't comment just to correct a typo as the intention is usually obvious but this is a bit different.)
- Xylakant 7y ago
  You're obviously absolutely correct. Thanks for the correction.