Support for age-plugin-yubikey

[TheWanderer1983]

Any chance you could add support?

Regards
Dylan

[biox]

i don't have a personal need for it, so i'm unlikely to add support - but if you could come up with an initial implementation, i might be willing to help you hammer it out.

[arcxio]

i've been meaning to play around with yubikey, just haven't got around to it yet, but if i understand it correctly, you generate an identity with it and then use it as usual with age.
since pa identities are out in the open in your ~/.local/share/pa/identities file, if you output an identity generated with age-plugin-yubikey to that file, your pa will be connected with your yubikey and all should work well.
the only thing i guess we could streamline here is that our identity autogeneration could pick up if you have age-plugin-yubikey installed and act accordingly.

[biox]

oh interesting, maybe i'll play with this today after work, i didn't realize it might be so trivial - i have a few spare yubikeys laying around

[TheWanderer1983]

On Wed Dec 11, 2024 at 1:50 AM AEDT, j3s wrote: oh interesting, maybe i'll play with this today after work, i didn't realize it might be so trivial - i have a few spare yubikeys laying around

age-plugin-yubikey identities have two parts: The secret key material, which is stored inside a YubiKey. An age identity file, which contains information that an age client can use to figure out which YubiKey secret key should be used.