sekey
sudo-touchid
| sekey | sudo-touchid | |
|---|---|---|
| 4 | 1 | |
| 2,429 | 1,546 | |
| 0.4% | - | |
| 0.0 | 0.0 | |
| over 1 year ago | over 2 years ago | |
| Rust | C | |
| MIT License | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
sekey
- Use TouchID to Authenticate Sudo on macOS
-
Apple/Google/Microsoft to accelerate rollout of passwordless sign‑in standard
> relaying auth requests to your phone for approval and storing secrets in the Secure Enclave
Like https://github.com/kryptco/kr [key stored in a [...] mobile app]?
Also, newer Macs have a Secure Enclave (supports 256-bit secp256r1 ECC keys):
https://github.com/maxgoedjen/secretive [storing and managing SSH keys in the Secure Enclave [...] or a Smart Card (such as a YubiKey)]
https://github.com/sekey/sekey [Use Touch ID / Secure Enclave for SSH Authentication!]
- Use Touch ID for Sudo on Mac
-
How often should I rotate my SSH keys?
Similar to the recommendations to use a YubiKey/hardware token, SeKey on a Mac lets you use a key generated in the Secure Enclave in an unexportable form (https://github.com/sekey/sekey)
sudo-touchid
-
Use Touch ID for Sudo on Mac
I just have a setuid root sudo binary (compiled from sudo-touchid: https://github.com/mattrajca/sudo-touchid) in my home folder ~/bin. This has worked a treat across OS updates, without hacking PAM stuff. It’s extremely convenient and has probably saved me cumulative hours in typing out my long password :)
What are some alternatives?
secretive - Store SSH keys in the Secure Enclave
WSL-Hello-sudo - Let's sudo by face recognition of Windows Hello on Windows Subsystem for Linux (WSL). It runs on both WSL 1 and WSL 2. This is a PAM module for Linux on WSL.
pam-watchid - PAM plugin module that allows the Apple Watch to be used for authentication
pam_reattach - Reattach to the user's GUI session on macOS during authentication (for Touch ID support in tmux)
openssh-sk-winhello - A helper for OpenSSH to interact with FIDO2 and U2F security keys through native Windows Hello API
webauthn - Web Authentication: An API for accessing Public Key Credentials
bless - Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function
WinCryptSSHAgent - Using a Yubikey for SSH Authentication on Windows Seamlessly
pam_wtid - Patch for Apple's pam_tid PAM Touch ID module to add sudo watch authentication
OpenSK - OpenSK is an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards.