4 ms·
Does anybody know if there is something similar for gpg keys? E.g. for commit signing? That is, natively with the Secure Enclave, not exportable.
by cube2222 11mo ago
Does anybody know if there is something similar for gpg keys? E.g. for commit signing?
That is, natively with the Secure Enclave, not exportable.
- fpoling 11mo agoGit commits can be signed with ssh keys.
- jeroenhd 11mo agoUnfortunately I've found that not every source management tool understands SSH signatures and using them may have your commits end up being shown as signed by an untrusted key. On Linux, GPG supports TPM2, but I'm not sure if that also works on macOS.
- jabberwhookie 11mo agoYou can (mis)use ssh keys for git signing, but GPG on gpg-card and S/MIME on PIV card are the two standards and their respective hardware implementations (for signing keys in general.)
- moooo99 11mo agoSome Fido2 keys like the YubiKey and Nitrokeys support PGP keys as well. Works pretty nice as well and has the added bonus of your key not being tied to a pice of hardware that is as likely to break like a laptop (or be upgraded on a semi-regular basis)
- rkeene2 11mo agoSee my comment above regarding Keeta Agent, which supports GPG and SSH with the same key.