As outlined in Mic92/ssh-to-age#14, it would be great if it would be possible to use piv-agent to generate age keys in some way.
Currently the only way to get SSH keys from Yubikey seems to be age-plugin-yubikey. Unfortunately it doesn't seem to be able to use the PIV keys generated by piv-agent. While that itself isn't too big of a deal, it also seems that age-plugin-yubikey cannot run while piv-agent is active, as the PIV device is busy. That means that piv-agent would have to be stopped every time a file needs to be encrypted or decrypted, which is really inconvenient.
Depending on the outcome of Mic92/ssh-to-age#14, it might be possible to get age keys from the SSH keys generated by piv-agent. However, I realised that piv-agent is already generating both SSH and GPG keys, so why not age? @str4d seems to acknowledge that some sort of an agent would be good to implement for age keys, and I have a hunch that piv-agent might already have a lot of the groundwork necessary for that.
As outlined in Mic92/ssh-to-age#14, it would be great if it would be possible to use
piv-agentto generate age keys in some way.Currently the only way to get SSH keys from Yubikey seems to be
age-plugin-yubikey. Unfortunately it doesn't seem to be able to use the PIV keys generated bypiv-agent. While that itself isn't too big of a deal, it also seems thatage-plugin-yubikeycannot run whilepiv-agentis active, as the PIV device is busy. That means thatpiv-agentwould have to be stopped every time a file needs to be encrypted or decrypted, which is really inconvenient.Depending on the outcome of Mic92/ssh-to-age#14, it might be possible to get age keys from the SSH keys generated by
piv-agent. However, I realised thatpiv-agentis already generating both SSH and GPG keys, so why not age? @str4d seems to acknowledge that some sort of an agent would be good to implement for age keys, and I have a hunch thatpiv-agentmight already have a lot of the groundwork necessary for that.