Show HN: Kryptonite – a new home for your SSH private key
1–10 of 227 posts
Re: Show HN: Kryptonite – a new home for your SSH private key
#2Hey HN! We've built a way to generate an SSH key on your phone and use it from your computer such that the private key never leaves the phone. We were inspired by the threat model of USB HSMs like the Yubikey and set out to build a free, public source, and easier to use BYOD alternative. Looking forward to your questions!
Re: Show HN: Kryptonite – a new home for your SSH private key
#3That looks pretty cool. You do have to make sure to back up your phone.
Re: Show HN: Kryptonite – a new home for your SSH private key
#4Why do I want my private key on my phone instead of the computer where I am using it?
Re: Show HN: Kryptonite – a new home for your SSH private key
#5Are the communications between the phone and the computer going via the kryptonite servers?
Re: Show HN: Kryptonite – a new home for your SSH private key
#6Seems quite similar to using a Yubikey to house your SSH key, just with bluetooth and your phone. A bit less secure, but still quite the interesting tool.
Re: Show HN: Kryptonite – a new home for your SSH private key
#7Hi, that looks good! I'll probably try it out soon.
One suggestion regarding PCI DSS: you should probably make a page/whitepaper that outlines the compliance story of Kryptonite. ScaleFT has a great one: https://www.scaleft.com/use-cases/pci-dss/. By the way, have you checked that you do not need to be compliant yourself?
Re: Show HN: Kryptonite – a new home for your SSH private key
#8Why do I want my private key on my phone instead of the computer where I am using it?
Even if your computer is 100% compromised, SSH can't be used without your explicit permission and knowledge.
Re: Show HN: Kryptonite – a new home for your SSH private key
#9Why do I want my private key on my phone instead of the computer where I am using it?
I'd like to know this too. My computer is patched daily, my phone less often.
Re: Show HN: Kryptonite – a new home for your SSH private key
#10Obvious question - What happens when the phone containing the private key is lost?