[FEATURE] HW Security key support

[wrenix]

Is your feature request related to a problem? Please describe.

Useof Hardware token like yubikey for cryption

Describe the solution you'd like

Work together with @tadfisher and improve: android-password-store/Android-Password-Store@develop...tadfisher:Android-Password-Store:security-keys to be merge ready

Describe alternatives you've considered

Redevelop the support in another way

Additional context

No response

[thomaspierson]

I also use a HW security key and would need this feature also. (it was working before when backend was OpenKeyChain)

[agrahn]

Looks like an intimidatingly huge task, not sure whether I will be able to allocate the mental resources in the foreseeable future to accomplish it. Did you contact @tadfisher about your request too, @wrenix?

[Thaodan]

I think it would help to outline the required work to integrate that feature.

[wrenix]

@agrahn - no i have not contact @tadfisher just hope he read that or de do not need him.

[skewballfox]

what library backend are you guys using for GPG support currently?

At least with yubikey, they implemented encryption support with the OpenPGP standard for smart cards. Their dev docs for pgp might have some relevant info.

I found 2 projects which might be worth digging through:

• an ancient java lib for supporting openpgp cards
• a newer but still possibly dead java lib

[agrahn]

what library backend are you guys using for GPG support currently?

pgpainless

[agrahn]

Work together with @tadfisher and improve: android-password-store/Android-Password-Store@develop...tadfisher:Android-Password-Store:security-keys to be merge ready

This implementation depends on HW Security SDK which is very outdated. If someone takes over maintenance then maybe I will take a look at https://github.com/tadfisher/Android-Password-Store/tree/security-keys.

[wrenix]

So switch back to OpenKeyChain like the last stable version of https://github.com/android-password-store/Android-Password-Store/ has?
This is security patched but not developed anymore.
(Better to use a software which was last year released then for 4 years.)

PS: Found a discussion here is already started: #287

[valasiadis]

I vibe-coded a usable implementation of this feature, including commit signing and a couple of other things. I am going to review it as soon as possible and start a merge request here. Just have a look at my comment here: #287 (comment)

[norbusan]

Relevant PR: #977
This starts with the initial work of @valasiadis and adds RSA support for SSH, and various security fixes.
The build from this branch is tested on my local device

[agrahn]

Relevant PR: #977 This starts with the initial work of @valasiadis and adds RSA support for SSH, and various security fixes. The build from this branch is tested on my local device

Thank you, @norbusan and @valasiadis. I'll try your contributions soon and report back.