Author deletes SSH keys using hardware enclaves

The author details a practical guide to removing all traditional on-disk SSH keys by transitioning entirely to hardware-backed secure enclaves. The approach covers configuring ed25519-sk keys on YubiKeys, setting up ssh-tpm-agent to use a Trusted Platform Module, and leveraging macOS Smart Card Authentication with the Apple Secure Enclave. The post discusses potential limitations, such as hardware dependency and presence detection requirements in clamshell mode. Open article →