search for: sk_flag

...Please note the `no-touch-required` and `resident` parameters on the key generation. $ ssh-keygen -vvvv -t ed25519-sk -O no-touch-required -O resident -O application=ssh:test Step 2. Confirm the generated key has `no-touch-required` option enabled with ssh-keygen. In the output below, please note sk_flags 0x20. This is the correct value for a key generated with resident and no-touch-required additional flags. $ ssh-keygen -v -y -f id_ed25519_sk sk-ssh-ed25519 at openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIF7VJC49NC4UjXCS9H4PhmH5Jfnh+TLKOHfttd9mL3h4AAAACHNzaDp0ZXN0 my at desktop debug1...

...num sshkey_private_format { ??? ?SSHKEY_PRIVATE_PEM = 1, ??? ?SSHKEY_PRIVATE_PKCS8 = 2, ?}; +const char * +sshkey_format_name(enum sshkey_private_format); ? ?/* key is stored in external hardware */ ?#define SSHKEY_FLAG_EXT?? ??? ?0x0001 @@ -162,6 +164,16 @@ struct sshkey_sig_details { ??? ?uint8_t sk_flags;?? ?/* U2F signature flags; see ssh-sk.h */ ?}; ? +/* Key storage parameters in private key file */ +struct sshkey_vault { +?? ?enum sshkey_private_format format; +?? ?char *ciphername; +?? ?char *kdfname; +?? ?int rounds; +}; +struct sshkey_vault?? ?*sshkey_vault_new(); +void?? ??? ?sshkey_vault_...

Hi, OpenSSH 8.2p1 is almost ready for release, so we would appreciate testing on as many platforms and systems as possible. This is a feature release. Snapshot releases for portable OpenSSH are available from http://www.mindrot.org/openssh_snap/ The OpenBSD version is available in CVS HEAD: http://www.openbsd.org/anoncvs.html Portable OpenSSH is also available via git using the instructions at