Package Details: tkey-ssh-agent 1.1.1-4

Git Clone URL: https://aur.archlinux.org/tkey-ssh-agent.git (read-only, click to copy)
Package Base: tkey-ssh-agent
Description: A ssh-agent for the Tillitis TKey
Upstream URL: https://github.com/tillitis/tkey-ssh-agent
Keywords: tillitis tkey
Licenses: GPL2
Conflicts: tkey-ssh-agent2
Provides: tkey-ssh-agent
Submitter: dr00tb
Maintainer: dr00tb
Last Packager: quite
Votes: 1
Popularity: 0.013705
First Submitted: 2023-04-11 19:00 (UTC)
Last Updated: 2026-03-27 08:45 (UTC)

Latest Comments

quite commented on 2026-03-25 08:15 (UTC) (edited on 2026-03-25 08:16 (UTC) by quite)

Adding this would be nice, sry for being a pain:

diff --git i/tkey-ssh-agent.install w/tkey-ssh-agent.install
index e3744ce..1c581bf 100644
--- i/tkey-ssh-agent.install
+++ w/tkey-ssh-agent.install
@@ -4,6 +4,6 @@ post_install() {
 }

 post_upgrade() {
-   echo -e "\033[1;33mThis release may change the TKey identity (CDI) compared to $2, i.e., you may not have the same Ed25519 keypair derived."
+   echo -e "\033[1;33mThis release may change the TKey identity (CDI) compared to $2, i.e., you may not have the same Ed25519 keypair derived. For more details see: https://github.com/tillitis/tkeyclient/security/advisories/GHSA-4w7r-3222-8h6v"
 }

quite commented on 2026-03-17 13:48 (UTC)

@dr00tb in any case, what happened here is not a update of the signer.bin -- it is the tkeyclient go code that has changed. Read the link i posted

dr00tb commented on 2026-03-17 11:19 (UTC)

@quite I haven't figured out a way to only present the message when signer.bin is updated, so I thought it was better to present it every time than not at all. Perhaps I'll change the wording to include "might".

quite commented on 2026-03-17 10:05 (UTC)

@dr00tb thank you for adding that upgrade notice message. Though it is not correct that the private keys will change for all users. It depends on if user's USS is "vulnerable", which statistically is 0.39% (1/256). Perhaps you could refer to https://www.tillitis.se/blog/2026/03/17/tkeyclient-advisory/ -- this quote is relevant "NOTE: If you are affected by the vulnerability your keys will change once you upgrade the app. To get the same keys as before, for instance to register new keys, don’t enter any USS when prompted."

dr00tb commented on 2024-04-17 11:37 (UTC)

@quite For the first couple of months the tkey-ssh-agent version was not being incremented. I have updated the package, hope it is to your liking.

quite commented on 2024-04-17 07:23 (UTC)

I find it slightly odd that you chose to use the version of tkey-device-signer as the version of this tkey-ssh-agent package. Hm.

cembro commented on 2023-04-14 22:10 (UTC) (edited on 2023-04-14 22:27 (UTC) by cembro)

Please change the build's make commands to:

make OBJCOPY="llvm-objcopy" apps tkey-ssh-agent

using objcopy from the llvm package.

If your available objcopy is anything other than the default llvm-objcopy, then define OBJCOPY to whatever they're called on your system. https://github.com/tillitis/tillitis-key1-apps/blob/ed88b4ecf84a0eb4fd78b4a828825da2b21e3c91/README.md?plain=1#L87-L89