Unsupported key type sk-ssh-ed25519

schack

Will this key type be supported at some point ?
/Henrik

---

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser:_ Not Provided

XIII

Is that similar to ed25519-sk (for security keys)?

Jack.P_1P

Hi @schack:

As @XIII mentioned, the sk-ssh-ed25519 type is for FIDO keys. Are you trying to add a key that originated on a security key? Let me know.

Jack

schack

Yes, it's a key generated with ssh-keygen -t ed25519-sk
plus a Yubikey
/Henrik

Jack.P_1P

Hi @schack:

1Password SSH Agent only supports SSH and Ed25519 key types: Manage SSH keys

The Ed25519-sk variant is a key where the private portion of the keypair is stored solely on your FIDO device and can't be extracted. If you're looking to use 1Password as your SSH agent, it would be necessary to generate a new key.

Jack

schack

Hi @Jack.P_1P
I'm using my Yubikey + SSH like this: https://cryptsus.com/blog/how-to-configure-openssh-with-yubikey-security-keys-u2f-otp-authentication-ed25519-sk-ecdsa-sk-on-ubuntu-18.04.html

It would be really nice to at least store a backup copy of the key in a SSH entry in 1Password

akano

This is exactly what I want to do - have 1password hang on to the key handles (since I'll have way more than 25, and I'll want to have access anywhere), and use the yubikey to authenticate it.

Jack.P_1P

Hi @akano:

Thanks for sharing. While I can't promise anything, I'll share your thoughts with the team.

Jack

phj

I'm looking for the same please :-)

gosmond

Bump, please add support for ed25519-sk SSH keys in 1Password, thank you.