Hacker News Reader

Looks like this changed for series 5 keys.

In August 2019: "the YubiKey now also supports ... Curve25519, the default curve used in ssh (EdDSA and Diffie-Hellman)", "Addition of Ed25519 signature support, a modern ECC curve".

See https://www.yubico.com/blog/whats-new-in-yubikey-firmware-5-...

View on HN

Have the OpenSSH devs finally relented and allowed support for PKCS#11 with ECC then ? ;-)

Last I saw there were patches put forward to the devs since 2015 and they consistently refused to look at them, let alone merge them.

When last I checked, at least on linux/ubuntu the blocking issue was in opensc-pkcs11, not ssh.

Awesome! Thanks, I missed that update!

Reply on news.ycombinator.com