openssh-sk-winhello

A helper for OpenSSH to interact with FIDO2 and U2F security keys through native Windows Hello API (by tavrez)
Add to my DEV experience u2f-keys fido Windows Openssh native-windows Fido2 security-key fido-u2f
Source Code
openssh-sk-winhello Reviews
Suggest alternative
Edit details
The modern identity platform for B2B SaaS
The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
workos.com
Sponsored

Openssh-sk-winhello Alternatives

Similar projects and alternatives to openssh-sk-winhello

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better openssh-sk-winhello alternative or higher similarity.
Suggest an alternative to openssh-sk-winhello

openssh-sk-winhello reviews and mentions

Posts with mentions or reviews of openssh-sk-winhello. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-08-26.
  • Use TouchID to Authenticate Sudo on macOS
    11 projects | news.ycombinator.com | 26 Aug 2022
    For Windows, it seems it's possible[0, see footnote], however there are problems like general incompatibilities [1], and official support status is " We have this in our backlog. At this point it's not prioritized.".

    0: https://github.com/tavrez/openssh-sk-winhello

    0.footnote: "Windows Hello also supports other types of authenticators like internal TPM device(if they support generating ECDSA or Ed25519 keys, they can be used instead of FIDO/U2F security keys)."

    1: https://github.com/tavrez/openssh-sk-winhello/issues

    2: https://github.com/PowerShell/Win32-OpenSSH/issues/1804#issu...

  • Hardening SSH
    2 projects | /r/programming | 5 Aug 2022
    Awesome article! Also found this tool (tavrez/OpenSsh-sk-winhello) for windows that lets you do this without admin access
  • [QUESTION] Is there a best way to manage multiple SSH on multiple Yubikeys?
    1 project | /r/yubikey | 1 Jun 2022
    Which is also how they are generated when retrieving them on a new computer via ssh-keygen -K since I used the application=ssh:yubikey_5 flag when first generating them. So something like ssh-keygen -t ed25519-sk -O resident -O application=ssh:yubikey_5c, but because I am on Windows I also had the -w winhello.dll flag (In case anyone stumbles on this question)
  • Using Yubikey FIDO with ssh-agent on macOS?
    1 project | /r/yubikey | 13 Apr 2022
    This is what i used but YMMV https://github.com/tavrez/openssh-sk-winhello/releases/tag/v2.0.0
  • Tell HN: GitHub no longer supporting unauthenticated `git://`
    10 projects | news.ycombinator.com | 11 Jan 2022
    > Because AFAIK, (Fido) yubikey support is still missing.

    Correct, hopefully Microsoft will provide an updated SSH client soon. It only requires recompiling OpenSSH with the correct flags.

    Alternatively, use these build instruction for openssh with FIDO for windows:

    https://gist.github.com/martelletto/6a7cf806c6433ac9ce71d66a...

    > Using either the PKCS#11 support or the gpg applet requires some extra piece of software

    For those wanting to do that, here are some ways:

    Using a premade dll:

    https://github-wiki-see.page/m/mooltipass/minible/wiki/Setti...

    Or with a middleware:

    https://github.com/mgbowen/windows-fido-bridge

    Using the Hello API:

    https://github.com/tavrez/openssh-sk-winhello

    Given how many people came with their own ways, I believe there's enough demand for Microsoft to fix that.

  • Unable to generate ssh sk keys on Windows 10
    1 project | /r/yubikey | 4 Jul 2021
  • How often should I rotate my SSH keys?
    8 projects | news.ycombinator.com | 25 Feb 2021
    My knowledge of WebAuthn is limited but their invocation of the relevant API seems like it should work for fingerprints also.

    [1] https://github.com/tavrez/openssh-sk-winhello

  • A note from our sponsor - InfluxDB
    www.influxdata.com | 25 Apr 2024
    Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →

Stats

Basic openssh-sk-winhello repo stats
7
181
0.0
over 1 year ago

tavrez/openssh-sk-winhello is an open source project licensed under GNU Lesser General Public License v3.0 only which is an OSI approved license.

The primary programming language of openssh-sk-winhello is C.

Popular Comparisons

  1. openssh-sk-winhello VS libfido2
  2. openssh-sk-winhello VS windows-fido-bridge
  3. openssh-sk-winhello VS wsl2-ssh-pageant
  4. openssh-sk-winhello VS secretive
  5. openssh-sk-winhello VS sekey
  6. openssh-sk-winhello VS Win32-OpenSSH
  7. openssh-sk-winhello VS bless
  8. openssh-sk-winhello VS authorized_keys
  9. openssh-sk-winhello VS u2f-token
  10. openssh-sk-winhello VS git-credential-manager

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com