Protecting SSH Keys with macOS Secure Enclave

(gatezh.com)

17 points | by js2 37 minutes ago

3 comments

  • Gigachad 4 minutes ago
    I was looking in to this just earlier today. The native macos version worries me a little because it seems someone just happened to discover it in MacOS, rather than it being a documented feature. The worry being Apple could change or remove it later locking you out of your keys since they never advertised this as a thing you could do.
  • cavoirom 16 minutes ago
    If someone like the native approach or is familiar with SeKey, I created sekey-sh to simplify the process: https://github.com/cavoirom/sekey-sh

    Work on macOS 26 and later.

  • bdamm 2 minutes ago
    We should have had this 20 years ago. It is almost pathological how difficult it is to reliably use hardware keys as ssh credentials.