GitHub - godaddy/sshenc: Eliminate plaintext keys: Hardware-backed SSH and Git security via Secure Enclave and TPM 2.0

Hardware-backed SSH key management, with first-class git identity and commit signing. sshenc generates SSH keys inside the Secure Enclave (macOS), TPM 2.0 (Windows/Linux), or a software fallback and serves them via a standard SSH agent. Private key material never leaves the hardware — it can't be exported, copied, or stolen from disk. Bundled with sshenc is gitenc, a git wrapper that makes per-rep

[efcl]

Secure EnclaveやTPM 2.0を使ったSSH鍵管理ツール。ハードウェアに紐づくSSH鍵を生成し、SSH agentとして利用できる。 `gitenc`でリポジトリごとのGit/SSH identity設定やSSH鍵によるコミット署名を扱える。