Unsupported key type sk-ssh-ed25519

Is that similar to ed25519-sk (for security keys)?

Hi @schack:

As @XIII mentioned, the sk-ssh-ed25519 type is for FIDO keys. Are you trying to add a key that originated on a security key? Let me know.

Jack

Yes, it's a key generated with ssh-keygen -t ed25519-sk
plus a Yubikey
/Henrik

Hi @schack:

1Password SSH Agent only supports SSH and Ed25519 key types: Manage SSH keys

The Ed25519-sk variant is a key where the private portion of the keypair is stored solely on your FIDO device and can't be extracted. If you're looking to use 1Password as your SSH agent, it would be necessary to generate a new key.

Jack

Hi @Jack_P_1P
I'm using my Yubikey + SSH like this: https://cryptsus.com/blog/how-to-configure-openssh-with-yubikey-security-keys-u2f-otp-authentication-ed25519-sk-ecdsa-sk-on-ubuntu-18.04.html

It would be really nice to at least store a backup copy of the key in a SSH entry in 1Password

This is exactly what I want to do - have 1password hang on to the key handles (since I'll have way more than 25, and I'll want to have access anywhere), and use the yubikey to authenticate it.

Hi @akano:

Thanks for sharing. While I can't promise anything, I'll share your thoughts with the team.

Jack

I'm looking for the same please :-)

Bump, please add support for ed25519-sk SSH keys in 1Password, thank you.

Bumping this topic again. Please take a look and reconsider. @Jack_P_1P 

It would be great if 1Password added support for sk-ssh-ed25519 SSH keys (FIDO2-backed SSH keys).

The main benefit for 1Password users would be centralized management of all SSH keys, both traditional keys and security-key-backed keys (e.g., YubiKey), within the 1Password SSH Agent. This would be especially valuable for users who work across multiple computers.