4 ms·
It's worth to add that the private key file generated by `ssh-keygen -t` is not the actual private key, but a reference (like a handle) to the private key store
by dandanua 5y ago
It's worth to add that the private key file generated by `ssh-keygen -t` is not the actual private key, but a reference (like a handle) to the private key stored on the secure device https://www.yubico.com/blog/github-now-supports-ssh-security-keys/ https://www.yubico.com/blog/github-now-supports-ssh-security...
- nikolay 5y agoI've been using this but you can't switch the security key, unfortunately. Just upgraded my security key and now I'm stuck with the old key.
- dandanua 5y agoYes, the practical impossibility of recovering a private key from a security device is a feature. This implies you can't change security devices without changing public keys.
- nikolay 5y agoYeah, I just didn't know how it works; didn't know it was stored there, but assumed it was just encrypted with the secret in the key, i.e. in the presence of the old and the new security key, it could be decrypted and re-encrypted with the new one.