Secretive – macOS native app to store SSH keys in the Secure Enclave
1–10 of 109 posts
Re: Secretive – macOS native app to store SSH keys in the Secure Enclave
#2Does this mean that the Secure Enclave is accessible by the user? If so, it prompts so many questions. How much disk space is available on the Enclave, for example.
Re: Secretive – macOS native app to store SSH keys in the Secure Enclave
#3Does this mean that the Secure Enclave is accessible by the user? If so, it prompts so many questions. How much disk space is available on the Enclave, for example.
You don’t actually need to store Secure Enclave protected data in the enclave. Can “wrap” it with the enclave’s key and store it on your own disk.
Re: Secretive – macOS native app to store SSH keys in the Secure Enclave
#4Does this mean that the Secure Enclave is accessible by the user? If so, it prompts so many questions. How much disk space is available on the Enclave, for example.
Totally a tangent, but it's interesting that we still refer to things as "disk space" even in the era of flash storage
Re: Secretive – macOS native app to store SSH keys in the Secure Enclave
#5Does this mean that the Secure Enclave is accessible by the user? If so, it prompts so many questions. How much disk space is available on the Enclave, for example.
Totally a tangent, but it's interesting that we still refer to things as "disk space" even in the era of flash storage
I know! But I wanted to write something very clear, and I chose the clearest word in my mind to convey my idea. That word is steeped in old tech, it so happens.
Oh and by the way, I was shopping for a cheap laptop for a non-profit this week, and I still had to be careful to pick a laptop with an SSD. Those spinning horrors are still jammed into laptop cases to this day.
Re: Secretive – macOS native app to store SSH keys in the Secure Enclave
#6Does this mean that the Secure Enclave is accessible by the user? If so, it prompts so many questions. How much disk space is available on the Enclave, for example.
Totally a tangent, but it's interesting that we still refer to things as "disk space" even in the era of flash storage
I wonder what a better term for disk storage would be. Block storage, in the way that cloud services refer to it? Just plain "storage"?
Re: Secretive – macOS native app to store SSH keys in the Secure Enclave
#7Is a similar service available for yubikeys connected to linux machines?
Re: Secretive – macOS native app to store SSH keys in the Secure Enclave
#8For anyone not aware, you can use macOS's keychain to store ssh key passwords and have them unlock at login. This way you can have the benefits and convenience of password managers in the command line for SSH certificates.
https://apple.stackexchange.com/questions/48502/how-can-i-pe...
Re: Secretive – macOS native app to store SSH keys in the Secure Enclave
#9From the FAQ:
> Q: How do I import my current SSH keys, or export my Secretive Keys?
> A: The secure enclave doesn't allow import or export of private keys. For any new computer, you should just create a new set of keys. If you're using a smart card, you might be able to export your private key from the vendor's software.
I don't get it. If so, how am I supposed to back up my keys in case of a hardware failure or hardware theft?
Re: Secretive – macOS native app to store SSH keys in the Secure Enclave
#10From the FAQ: > Q: How do I import my current SSH keys, or export my Secretive Keys? > A: The secure enclave doesn't allow import or export of private keys. For any new computer, you should just create a new set of keys. If you're using a smart card, you might be able to export your private key from the vendor's software. I don't get it. If so, how am I supposed to back up my keys in case of a hardware failure or har…
You aren't. It is the same with Yubikeys, if you use them. You are supposed to generate a certificate per user and device they are using for authentication, which is not a big deal at least for remote login on servers, as you can set an arbitrary number of valid SSH keys.