search

Foxboron / ssh-tpm-agent

:computer: :key: ssh-agent for TPMs
MIT License
354 stars 20 forks source link

Change PIN #39

Closed mutantmonkey closed 6 months ago

mutantmonkey commented 9 months ago

Is it possible to change the PIN for a key, similar to ssh-keygen's -p? I don't see an option in ssh-tpm-keygen for this.

Foxboron commented 9 months ago

Currently not possible. But it should be fairly trivial to implement.

FLX-0x00 commented 8 months ago

would love to see this feature =)

Foxboron commented 8 months ago

https://github.com/google/go-tpm/ needs to be extended to support TPM2_ObjectChangeAuth for this to be implemented.

I have patches locally for this but need to upstream them first.

Foxboron commented 8 months ago

TPM2_ObjectChangeAuth has been implemented here https://github.com/google/go-tpm/pull/354

Foxboron commented 7 months ago

Upstream PR has landed so I'll take a stab at this soon'ish.

Foxboron commented 6 months ago

ssh-tpm-keygen -p should work with the next release of ssh-tpm-agent.

https://github.com/Foxboron/ssh-tpm-agent/commit/2935df47bb97498fb3a6cdd68bf9573b90e4d055