Unsupported key type sk-ssh-ed25519

schack · February 2023

Will this key type be supported at some point ?
/Henrik

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser:_ Not Provided

XIII · February 2023

Is that similar to ed25519-sk (for security keys)?

Jack.P_1P · February 2023

As @XIII mentioned, the sk-ssh-ed25519 type is for FIDO keys. Are you trying to add a key that originated on a security key? Let me know.

Jack

schack · February 2023

Yes, it's a key generated with ssh-keygen -t ed25519-sk
plus a Yubikey
/Henrik

Jack.P_1P · February 2023

Hi @schack:

1Password SSH Agent only supports SSH and Ed25519 key types: Manage SSH keys

The Ed25519-sk variant is a key where the private portion of the keypair is stored solely on your FIDO device and can't be extracted. If you're looking to use 1Password as your SSH agent, it would be necessary to generate a new key.

Jack

schack · February 2023

Hi @Jack.P_1P
I'm using my Yubikey + SSH like this: https://cryptsus.com/blog/how-to-configure-openssh-with-yubikey-security-keys-u2f-otp-authentication-ed25519-sk-ecdsa-sk-on-ubuntu-18.04.html

It would be really nice to at least store a backup copy of the key in a SSH entry in 1Password

akano · April 2023

This is exactly what I want to do - have 1password hang on to the key handles (since I'll have way more than 25, and I'll want to have access anywhere), and use the yubikey to authenticate it.

Jack.P_1P · April 2023

Hi @akano:

Thanks for sharing. While I can't promise anything, I'll share your thoughts with the team.

Jack

phj · September 2023

I'm looking for the same please :-)

gosmond · February 10

Bump, please add support for ed25519-sk SSH keys in 1Password, thank you.

Unsupported key type sk-ssh-ed25519

Comments