[an6n]

When's the Part 2 gonna be published?

Will there be a blog post about using gpg-agent as a ssh-agent? :)

BTW, Androids openkeychain supports fully yubikey neo, this is a great addition to using the pass(1) on from mobile with yubikey neo.

https://github.com/zeapo/Android-Password-Store http://www.openkeychain.org/

[burke]

For a little while, I used a YubiKey NEO-n as an OpenPGP smartcard, with gpg-agent running as an ssh-agent (so that my SSH key was only present on my smartcard).

While great in theory, the authentication time made it totally impractical to connect to multiple servers at once.

I know this doesn't invalidate the general idea of using gpg-agent as ssh-agent -- just an anecdote.

[rmac]

Can you elaborate on 'authentication time made it totally impractical' ?

Does this mean it was slow? I'm using gpg-agent on osx with a neo-n to ssh into boxes and it's not noticeably slow.

[burke]

Thinking on this again now, perhaps using a shorter key (I'm sure I would have chosen 4k RSA) would have helped. Regardless, I did find that connecting to 50+ hosts at the same time, most of them would hit my 3 second connect timeout with the neo-n and gpg-agent.

This is a somewhat unusual use-case, I will grant, but I also found a somewhat-noticeable delay in connecting to a single server, on the order of several hundred milliseconds.

I wonder if it would all be fine with a 2k key.

[darklajid]

I might be mistaken, but I think Yubikeys only support 2k keys? I'm reasonably sure mine does anyway.

[an6n]

I got this just this second on my debian8 system.

:~$ time ssh an6n@mybox exit

real 0m1.910s

user 0m0.024s

sys 0m0.000s

[e12e]

Could you also list timings with just regular ssh-agent?

[616c]

I will not give up on this setup, minus the Yubikey (would love to one day), but it recently broke it when I updated via F-Droid, and it has not been the same since.

https://github.com/zeapo/Android-Password-Store/issues/77

Still, the only password manager simple enough that I can understand it and will actually use.

http://git.zx2c4.com/password-store/

[viccuad]

author here: All of that should be on Part 2, in a week or so.

Part 2 will cover emails (Thunderbird, mutt), pass as a password store, setting up OpenKeychain + a Yubikey Neo on an Android phone, K-9 Mail on Android, Yubico authenticator for Android as a 2-step auth, ssh, and Keybase. Future parts would cover hdd encryption via LUKS, authentication for sudo and more, GPG by NFC on your desktop, GPG intents to open doors, etc.