Show HN: Sekey.sh – Manage SSH Keys in Apple Secure Enclave

A shell script for managing SSH keypairs stored in Apple Secure Enclave. Inspired by SeKey. - cavoirom/sekey-sh
2 points by cavoirom 87 days ago github.com 0 comments
Summary not yet generated for this article.

Original Text

Since I used MacBook with TouchID, I've been using SeKey (by Nicolas Trippar) to manage my SSH keys. It come with 2 advantages: the private keys are non-exportable and I will be asked for TouchID everytime a program needs SSH authentication. I'm happy with that setup because I won't worry about leaking my private keys and the authentication is quite convenience, until recently: the project is abandoned, no Apple Silicon build and macOS will end the x86 support soon. Then I found out macOS has enough material to provide the exact functionalities of SeKey, I created sekey.sh to reproduce those functionalities. It can create SSH keypair backed by Secure Enclave, delete the keypair, show created keypairs, export public key, add keys to SSH agent. I hope you find it useful if you have the same workflow as me.

Comments (0 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open