Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add decryption agent functionality #63

Open
fmeum opened this issue Oct 21, 2020 · 5 comments
Open

Add decryption agent functionality #63

fmeum opened this issue Oct 21, 2020 · 5 comments

Comments

@fmeum
Copy link

fmeum commented Oct 21, 2020

I'm currently using the OpenPGP applet on my Yubikey for two things: SSH authentication and password decryption with pass. Given all the well-known UX issues with gpg and smart cards/hardware tokens, I would like to switch to yubikey-agent, (r)age & PIV. Most of the ecosystem is there or not hard to build (such as a pass clone that relies on age), but currently the two use cases authentication and decryption don't work well simultaneously due to the need for exclusive reader access.

A convenient feature of gpg that works around the "reader lock" issue is that it can work as an agent for both SSH auth and decryption. What are thoughts about adding decryption agent functionality to yubikey-agent, which could then be used by (r)age?

@FiloSottile
Copy link
Owner

A (r)age plugin that uses yubikey-agent is on the roadmap :)

@yvesf
Copy link

yvesf commented Jan 8, 2022

original message replaced
Edit: Here was a draft how yubikey-agent could be extended to be used with age. Following #63 (comment) I had an e-mail exchange with @tv42. As he points out below I used some routines from his project and by mistake didn't put the correct attribution to him. I understood him in our conversation that correcting this alone is not in his interest. Since even with correct attribution my draft contain some lines of code with him (the actual enc/decryption part of file-keys), I'll not advertise it here any further.

@yvesf
Copy link

yvesf commented Jan 18, 2022

I updated the relevant places with a copyright notice pointing to the source, the links in my first comments are updated accordingly. I'm sorry that I forgot the attribution to tv42 in these places. To my knowledge these three are all places where your work is used. @tv42 please let me know if you see more problems.

This licensing jumble is not really nice in the code (there is also some code copied from age itself but that could potentially be resolved easily by the author of age). I want state it very clear here too that this is not like a MR but just in a "works for me" state.

I'm not too eager to deal with license compatibility, copyright and such stuff. I'd rather retract the whole thing.

@IxDay
Copy link

IxDay commented Sep 30, 2022

Is there a repo we can checkout to assist or just keep track of the progress?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants