Hacker News Reader

I'm going to show my security ignorance by asking two questions

1) is there a simple key destroy function?

2) if somebody gains remote login access to the host with root, noting they can't exfiltrate the keys, can they subvert process chains to claim linkage to the ssh-agent process?

I do like this. I am very tempted. I would like a keypair which tied strongly to me, on this specific laptop.

View on HN

> 1) is there a simple key destroy function?

Just rm the key file. TPM sealed secrets are never actually stored inside the TPM, they are just files with strong encrypted that only the TPM can decrypt. So deleting the key file removes your ability to recreate the key.

> 2) if somebody gains remote login access to the host with root, noting they can't exfiltrate the keys, can they subvert process chains to claim linkage to the ssh-agent process?

Possibly, yes.

Reply on news.ycombinator.com