{"slug": "ssh-tpm-agent", "name": "ssh-tpm-agent", "category": "security", "category_name": "Security and passwords", "description": "", "recommenders": 3, "commenters": 4, "warners": 1, "score": 1.76, "rising": -0.98, "first": "2025-11-23", "latest": "2026-08-01", "why": "Very nice! I use something client side like this on my Mac", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 0, "compare": 0, "warn": 1}, "spark": [1, 0, 0, 0, 0, 0, 1, 0, 0, 1, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "Very nice! I use something client side like this on my Mac", "kind": "", "icon": false, "domain": null, "github_repo": "github.com/foxboron/ssh-tpm-agent", "official_url": "https://github.com/foxboron/ssh-tpm-agent", "pricing": "", "aliases": ["ssh-tpm-agent"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 786155136, "item_id": 49134696, "url": "https://news.ycombinator.com/item?id=49134696", "by": "aorth", "date": "2026-08-01", "version": null, "stance": "recommend", "quote": "it is really nice!", "excerpt": "Oh this is hard to read. Foxboron was a massively positive force for Arch Linux and the Linux ecosystem in general! I discovered his ssh-tpm-agent https://github.com/Foxboron/ssh-tpm-agent a few months ago and it is really nice!", "context": "", "use_case": "SSH keys with TPM", "switched_from": "", "story": "Morten Linderud resigning from Arch Linux development team"}, {"id": 768221408, "item_id": 48013838, "url": "https://news.ycombinator.com/item?id=48013838", "by": "epistasis", "date": "2026-05-04", "version": null, "stance": "recommend", "quote": "Very nice! I use something client side like this on my Mac", "excerpt": "Very nice! I use something client side like this on my Mac, and if my terminal was Linux I'd want this too. The host key section makes me wonder about doing this with servers, but what are the security guarantees in places like the cloud with that? Are you relegated to a software TPM, and if so, what guarantees does a software TPM have? My question after reading the README.md: what are the requirements from the OS? C", "context": "Mac user", "use_case": "SSH keys backed by TPM", "switched_from": "", "story": "Show HN: SSH-TPM-agent \u00b7 Release v0.9.0"}, {"id": 742266912, "item_id": 46391682, "url": "https://news.ycombinator.com/item?id=46391682", "by": "Foxboron", "date": "2025-12-26", "version": null, "stance": "recommend", "quote": "This is my cue.", "excerpt": "> It's unfortunate that people don't really know about it, but I guess the tools available aren't that user friendly This is my cue. https://github.com/Foxboron/ssh-tpm-agent", "context": "", "use_case": "", "switched_from": "", "story": "Hardware Touch, Stronger SSH"}, {"id": 736429824, "item_id": 46026864, "url": "https://news.ycombinator.com/item?id=46026864", "by": "agartner", "date": "2025-11-23", "version": null, "stance": "recommend", "quote": "works well for me", "excerpt": "https://github.com/Foxboron/ssh-tpm-agent works well for me", "context": "", "use_case": "SSH keys in TPM", "switched_from": "", "story": "Native Secure Enclave backed SSH keys on macOS"}]}], "caveats": [{"label": "", "summary": "", "quotes": [{"id": 764777808, "item_id": 47798613, "url": "https://news.ycombinator.com/item?id=47798613", "by": "tiberious726", "date": "2026-04-16", "version": null, "stance": "warn", "quote": "The authors of both this article and ssh-tpm-agent (disjoint set) really need to learn about pcrphases", "excerpt": "The authors of both this article and ssh-tpm-agent (disjoint set) really need to learn about pcrphases and the signing keys therefor: https://github.com/Foxboron/ssh-tpm-agent/issues/15", "context": "", "use_case": "", "switched_from": "", "story": "Put your SSH keys in your TPM chip"}]}], "who": [{"by": "epistasis", "context": "Mac user", "url": "https://news.ycombinator.com/item?id=48013838", "date": "2026-05-04"}], "tags": [], "use_cases": ["ssh keys with tpm", "ssh keys backed by tpm", "ssh keys in tpm"], "compared": [], "makers": [{"id": 736426672, "item_id": 46026667, "url": "https://news.ycombinator.com/item?id=46026667", "by": "Foxboron", "date": "2025-11-23", "version": null, "stance": "recommend", "quote": "I started working on one few years ago", "excerpt": "A golang library is cool, but it doesn't give you a working ssh-agent. I started working on one few years ago: https://github.com/Foxboron/ssh-tpm-agent", "context": "", "use_case": "SSH agent backed by TPM", "switched_from": "", "story": "Native Secure Enclave backed SSH keys on macOS"}], "threads": [{"url": "https://news.ycombinator.com/item?id=46025721", "title": "Native Secure Enclave backed SSH keys on macOS", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=49133647", "title": "Morten Linderud resigning from Arch Linux development team", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48013730", "title": "Show HN: SSH-TPM-agent \u00b7 Release v0.9.0", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47738520", "title": "Put your SSH keys in your TPM chip", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46352227", "title": "Hardware Touch, Stronger SSH", "mentions": 1}], "sentiment_by_month": {"2025-11": {"recommend": 1}, "2025-12": {}, "2026-01": {}, "2026-02": {}, "2026-03": {}, "2026-04": {"warn": 1}, "2026-05": {"recommend": 1}, "2026-06": {}, "2026-07": {}, "2026-08": {"recommend": 1}, "2026-09": {}, "2026-10": {}}, "versions": [], "version_unnamed": 0, "family_ref": null, "runs_on": null, "lines": [], "quotes": [{"id": 786155136, "item_id": 49134696, "url": "https://news.ycombinator.com/item?id=49134696", "by": "aorth", "date": "2026-08-01", "version": null, "stance": "recommend", "quote": "it is really nice!", "excerpt": "Oh this is hard to read. Foxboron was a massively positive force for Arch Linux and the Linux ecosystem in general! I discovered his ssh-tpm-agent https://github.com/Foxboron/ssh-tpm-agent a few months ago and it is really nice!", "context": "", "use_case": "SSH keys with TPM", "switched_from": "", "story": "Morten Linderud resigning from Arch Linux development team"}, {"id": 768221408, "item_id": 48013838, "url": "https://news.ycombinator.com/item?id=48013838", "by": "epistasis", "date": "2026-05-04", "version": null, "stance": "recommend", "quote": "Very nice! I use something client side like this on my Mac", "excerpt": "Very nice! I use something client side like this on my Mac, and if my terminal was Linux I'd want this too. The host key section makes me wonder about doing this with servers, but what are the security guarantees in places like the cloud with that? Are you relegated to a software TPM, and if so, what guarantees does a software TPM have? My question after reading the README.md: what are the requirements from the OS? C", "context": "Mac user", "use_case": "SSH keys backed by TPM", "switched_from": "", "story": "Show HN: SSH-TPM-agent \u00b7 Release v0.9.0"}, {"id": 764777808, "item_id": 47798613, "url": "https://news.ycombinator.com/item?id=47798613", "by": "tiberious726", "date": "2026-04-16", "version": null, "stance": "warn", "quote": "The authors of both this article and ssh-tpm-agent (disjoint set) really need to learn about pcrphases", "excerpt": "The authors of both this article and ssh-tpm-agent (disjoint set) really need to learn about pcrphases and the signing keys therefor: https://github.com/Foxboron/ssh-tpm-agent/issues/15", "context": "", "use_case": "", "switched_from": "", "story": "Put your SSH keys in your TPM chip"}, {"id": 742266912, "item_id": 46391682, "url": "https://news.ycombinator.com/item?id=46391682", "by": "Foxboron", "date": "2025-12-26", "version": null, "stance": "recommend", "quote": "This is my cue.", "excerpt": "> It's unfortunate that people don't really know about it, but I guess the tools available aren't that user friendly This is my cue. https://github.com/Foxboron/ssh-tpm-agent", "context": "", "use_case": "", "switched_from": "", "story": "Hardware Touch, Stronger SSH"}, {"id": 736429824, "item_id": 46026864, "url": "https://news.ycombinator.com/item?id=46026864", "by": "agartner", "date": "2025-11-23", "version": null, "stance": "recommend", "quote": "works well for me", "excerpt": "https://github.com/Foxboron/ssh-tpm-agent works well for me", "context": "", "use_case": "SSH keys in TPM", "switched_from": "", "story": "Native Secure Enclave backed SSH keys on macOS"}]}