awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
sekey avatar

sekey/sekey

0
View on GitHub↗

Sekey

Sekey is a hardware-backed SSH key manager and authentication agent designed to isolate private keys from system memory. It utilizes a secure enclave to generate, store, and manage cryptographic key pairs, ensuring that sensitive material remains within a protected hardware environment and cannot be extracted by the host system.

The project implements biometric-gated request signing, requiring a biometric authentication event before the hardware security module signs a cryptographic challenge. It functions as a middleware bridge that connects standard SSH protocols to these hardware-based signing mechanisms for session verification.

The system covers the full lifecycle of hardware-resident keys, including generation, deletion, and the export of internal hardware keys into standard public key formats for remote server authorization. It performs all signing and decryption operations inside the secure enclave to maintain hardware-backed access control.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Features

  • Hardware Security Key Authentications - Provides hardware-backed SSH authentication using secure enclaves and biometric verification to isolate private keys.
  • Biometric-Gated Signing - Implements biometric-gated request signing, requiring hardware verification before signing cryptographic challenges.
  • Hardware-Internal Key Generation - Generates and stores cryptographic key pairs directly within a hardware enclave to prevent exposure.
  • Hardware Key Lifecycle Management - Allows the creation, listing, and deletion of cryptographic keys directly within secure hardware.
  • Hardware-Backed Security - Implements hardware-backed access control by requiring biometric or hardware verification for remote server sessions.
  • Hardware-Backed SSH Key Managers - Provides a manager for storing and managing SSH private keys within a hardware security module.
  • Secure Enclaves - Performs all signing and decryption operations inside a protected secure enclave to isolate sensitive material.
  • Hardware-Backed Key Storage - Stores private keys inside a secure enclave to ensure they cannot be extracted or accessed by system memory.
  • Hardware Key Isolation - Isolates SSH private keys from system memory by performing signing operations inside a hardware module.
  • SSH Protocol Bridges - Acts as a middleware bridge connecting standard SSH protocols to hardware-based signing mechanisms.
  • Hardware Key Serialization - Transforms internal hardware key formats into standard public key strings compatible with remote server authorization.
  • SSH Agent Integrations - Functions as an SSH authentication agent that signs requests using hardware security and biometric verification.
  • Hardware Public Key Exporters - Converts hardware-resident keys into standard public key formats for remote server authorization.
  • Public Key Serializations - Converts hardware keys into standard SSH public key serializations for distribution to authorized_keys files.
2,514 stars·80 forks·Rust·MIT·20 views

Star history

Star history chart for sekey/sekeyStar history chart for sekey/sekey

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

Projects sharing features with Sekey

These projects share indexed features with Sekey. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • maxgoedjen/secretivemaxgoedjen avatar

    maxgoedjen/secretive

    8,162View on GitHub↗

    Secretive is an SSH key manager that utilizes hardware-backed security modules to generate and store non-exportable private keys. It integrates with secure enclaves to ensure that sensitive cryptographic material remains within the hardware and cannot be exported from the device. The system implements a biometric authentication workflow, requiring fingerprint or wearable verification before a private key is released for signing operations. It also provides the ability to bridge signing requests to external hardware tokens for systems that lack a built-in secure enclave. The project includes

    Swiftmacsecure-enclavesecurity
    View on GitHub↗8,162
  • drduh/yubikey-guidedrduh avatar

    drduh/YubiKey-Guide

    12,377View on GitHub↗

    This project is a comprehensive hardware security guide for using YubiKey tokens to manage encryption, digital signatures, and secure authentication. It provides technical instructions for configuring hardware security modules to handle digital identity and cryptographic materials. The documentation focuses on the implementation of OpenPGP and SSH workflows, specifically covering the creation of master key hierarchies, the rotation of subkeys, and the use of hardware-backed keys for secure shell connections. It also details methods for verifying code authorship through signed Git commits and

    HTML
    View on GitHub↗12,377
  • sigstore/cosignsigstore avatar

    sigstore/cosign

    5,667View on GitHub↗

    Cosign is a tool for signing and verifying software artifacts, primarily those stored in OCI-compatible registries such as container images, Helm charts, SBOMs, and Tekton bundles. It supports keyless signing using ephemeral keys and short-lived certificates from the Sigstore public-good infrastructure, associating signatures with an OpenID Connect identity rather than a long-lived cryptographic key. The project provides multiple signing and verification methods, including private keys, key pairs stored in KMS providers like AWS KMS and Azure Key Vault, and hardware security keys. It can sign

    Go
    View on GitHub↗5,667
  • standardnotes/appstandardnotes avatar

    standardnotes/app

    6,519View on GitHub↗
    TypeScriptencryptedevernotemarkdown
    View on GitHub↗6,519
Compare all 30 related projects→

Frequently asked questions

What does sekey/sekey do?

Sekey is a hardware-backed SSH key manager and authentication agent designed to isolate private keys from system memory. It utilizes a secure enclave to generate, store, and manage cryptographic key pairs, ensuring that sensitive material remains within a protected hardware environment and cannot be extracted by the host system.

What are the main features of sekey/sekey?

The main features of sekey/sekey are: Hardware Security Key Authentications, Biometric-Gated Signing, Hardware-Internal Key Generation, Hardware Key Lifecycle Management, Hardware-Backed Security, Hardware-Backed SSH Key Managers, Secure Enclaves, Hardware-Backed Key Storage.

Which projects share features with sekey/sekey?

Projects with overlapping indexed features include: maxgoedjen/secretive — Secretive is an SSH key manager that utilizes hardware-backed security modules to generate and store non-exportable… drduh/yubikey-guide — This project is a comprehensive hardware security guide for using YubiKey tokens to manage encryption, digital… sigstore/cosign — Cosign is a tool for signing and verifying software artifacts, primarily those stored in OCI-compatible registries… standardnotes/app. andotp/andotp — andOTP is an open-source multi-factor authentication client for Android. It functions as a time-based and HMAC-based… kata-containers/kata-containers — Kata Containers is an OCI container runtime that launches containers inside lightweight virtual machines to combine…