[akerl_]

Just to clarify: they don’t have the GPG applet. They can do SSH auth via the new fido2 support, but not via older methods like x509 RSA keys or GPG-as-an-ssh-key

[Avamander]

x509 certificates (PIV applet) can be elliptic as well, just to clarify.

[akerl_]

True. I always forget because they can’t (to my knowledge) use ed25519, just ecdsa.