yubage
`age-plugin-yubikey` implementation, encrypt things with a Yubikey/any PIV card (by tv42)
trezor-agent
Hardware-based SSH/GPG/age agent (by romanz)
| yubage | trezor-agent | |
|---|---|---|
| 2 | 9 | |
| 25 | 559 | |
| - | - | |
| 0.0 | 4.9 | |
| about 3 years ago | 8 days ago | |
| Go | Python | |
| GNU General Public License v3.0 or later | GNU Lesser General Public License v3.0 only |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
yubage
Posts with mentions or reviews of yubage.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-11-13.
- It's Now Possible to Sign Arbitrary Data with Your SSH Keys
-
Yubikey PIV encrypted messaging system
age also has a notion of plugins, one of which is age-plugin-yubikey (written in Rust, there is also yubage written in Go) which allows you to create an age identity whose private key is stored via PIV.
trezor-agent
Posts with mentions or reviews of trezor-agent.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-06-07.
-
Mnemonikey | Determinstic PGP key recovery using phrases | v0.0.1 prerelease published
It doesn't support signing and authentication subkeys (But maybe it will soon!).
-
agenix and ssh keys
GPG "master keys" are on the Trezor, which has no mass storage. You can read more how to use if for GPG in here: https://github.com/romanz/trezor-agent/blob/master/doc/README-GPG.md. Trezor needs a PIN + passphrase typed on the device to be secure from physical attacks (Google: trezor hacked).
-
Best way of encrypting files / folders using the Trezor
I use romanz/trezor-agent and it is recommended on the official trezor wiki.
-
Anyone here use the Trezor hardware wallet for GPG?
it looks like someone on the github for the Trezor GPG has worked on it but I have no clue how to run this script. Here's the first link I found under the issues tab.
- Creating or associating multiple subkeys with a Trezor signed GPG key.
-
TIL: Trezor-T works under WSL-2 (Linux on Windows) using usbipd-win
I'd been working with the trezor-gpg and trezor-ssh features recently, but found them difficult to configure in Windows. When I saw the WSL-2 article on usbipd, found everything worked great.
-
It's Now Possible to Sign Arbitrary Data with Your SSH Keys
Ledger/Trezor have solved this since ~2016. I have a Ledger that has a private key inside and using a small open source tool (https://github.com/romanz/trezor-agent) I can SSH into machines, sign random data and Github commits and FIDO authenticate into several websites. All of that and knowing that these devices offer some of the best security out there.
-
So... which one do I want? [3 different OpenPGP applications?]
SSH/PGP agent is a proxy application intended to work with https://github.com/romanz/trezor-agent
What are some alternatives?
When comparing yubage and trezor-agent you can also consider the following projects:
git-crypt - Transparent file encryption in git
ssh-agent-pkcs11 - A PKCS#11 module which uses certificates stored on remote systems accessed over the SSH Agent protocol
rekor - Software Supply Chain Transparency Log
PIVX-SPMT - Secure PIVX Masternode Tool - Setup & Manage your masternodes while storing collateral on a Ledger device!
rage - A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.
PET4L - PIVX Emergency Tool for Ledger - Spend PIV from a seemingly "Stuck" Ledger wallet
age-plugin-yubikey - YubiKey plugin for age
Colima.bundle - Combined Library Metadata Agent (Colima)
strledger - Sign Stellar Transaction with Ledger on the command line.