Hacker News new | ask | show | jobs
by tkanarsky 1242 days ago
I find that the PIV smart card stack is needlessly complicated if all you're trying to do is add a resident SSH key to your yubikey. Look at `ed25519-sk` [0], which is supported by default by recent versions of OpenSSH (and dropbear? idk)

[0]: https://news.ycombinator.com/item?id=29231396

1 comments

PGP is definitely complicated if you’re not going to use it for other functionality.

And that’s completely separate to the PIV functionality on the key.

Oh, I was under the impression that PIV referred to the smart card protocol and PGP was an application making use of that protocol, something like TCP and HTTP. Looks like I'm mistaken, thanks!