HOME
art gallery Linkedin Donations Recommendations
Login
Premium
Info
Vuln Fact Check Server Managment Links
SSH
Auth.log Debug DNS key share Security Key file transfers Cheatpapper
Ciphers
fido2 Twofish serpent .ssh/config cipher set sshd set cipher
Firewall
IP block list Fail2ban SELinux SSH Proxy Jump
Tools
Mpiexec Rsync Mosh Glances SSHFS Tmate autossh XQuartz hashcat
VPN
SSH Tunneling Cloudflare Onion Network/Tor sshuttle SSH Proxy Reverse Tunnel SSH Tunnel ssh socksv5 proxy
Keys
CA Info Generate Ed25519 key OTP Certificates keys CA & Host auth Backup Key Trezor Ledger ch341a coldstorage
Tweaks
DNS BASH Zsh ssh client env sshd env config
Config files
Single Node backup sshd_config Firewall Single Node Cloud Firewall Single Node Firewall X11 Win +10 sshd VMware ESXi Hardening fail2ban Config Dump Space

Ledger


(Ledger Nano S/Ledger Nano X/Ledger Stax) is a hardware security key,
that can be used to securely store SSH keys and authenticate SSH sessions.
The Ledger-agent software is a command-line utility that allows you to use your Ledger to authenticate SSH connections without exposing your private keys to the network or the computer you are connecting from.
Ledger’s SSH agent support covers ECDSA P-256/prime256v1 and Ed25519 SSH keys. (NOTE: that it doesnt cover RSA)
While RSA keys are still widely used, newer key type Ed25519 are generally considered to be more secure and efficient.

To use Ed25519 keys with the Ledger usb key and Ledger-agent software, you can simply use the command 

 ledger-agent -e ed25519 user@host
The key generation is based on the identity and host, so it cannot be changed.
use the -c to connect rather then generate a key 
 ledger-agent -e ed25519 -c user@host

Benefits of using hardware security keys like the (Ledger Nano X/Ledger Nano S/Ledger Stax) for SSH authentication include increased security and protection against key theft or compromise, as well as convenience and ease of use.


Currently, these keys are very cheap second-hand on eBay. Since they are commonly used to store BTC, many users avoid second-hand USB hardware wallets because of security concerns.
Because of this, it is sometimes possible to find them second-hand for half of their new retail value, especially during times when the BTC price dips.
From a security perspective, your mileage may vary. Using Ledger devices for SSH is not really an industry standard, which also means it has not been a major focus area for most attackers.