The author documents migrating from traditional on-disk SSH keys to hardware-resident keys stored across multiple secure enclaves including YubiKey, TPM, and Apple Secure Enclave. The goal is to eliminate any unprotected key material on disk while achieving native integration for use cases like LXC containers and SSHFS.
Background
SSH hardware-backed keys are increasingly popular among security-conscious users seeking to protect private keys from extraction or theft. Modern systems offer built-in secure enclaves like TPM and Apple Secure Enclave as alternatives to external tokens.
- Source
- Lobsters
- Published
- Nov 11, 2026 at 04:49 AM
- Score
- 5.0 / 10