Merge branch 'ssh/fido' of https://github.com/kasecato/cheatsheets in…

…to kasecato-ssh/fido

ssh-add

@@ -0,0 +1,20 @@
+---
+tags [ ssh ]
+---
+# To add private key:
+ssh-add <keyfile>
+
+# To load resident keys from FIDO2 authenticator:
+ssh-add -K
+
+# To list all public keys:
+ssh-add -L
+
+# To list fingerprints of all keys:
+ssh-add -l
+
+# To delete key:
+ssh-add -d <keyfile>
+
+# To delete all keys:
+ssh-add -D

ssh-keygen

@@ -1,12 +1,18 @@
 ---
 tags [ ssh ]
 ---
-# To generate an SSH key:
+# To generate a SSH key:
 ssh-keygen -t rsa
 
 # To generate a 4096-bit SSH key:
 ssh-keygen -t rsa -b 4096
 
+# To generate a FIDO/U2F token-backed key:
+ssh-keygen -t ed25519-sk
+
+# To generate a FIDO2 resident key:
+ssh-keygen -t ed25519-sk -O resident
+
 # To update a passphrase on a key:
 ssh-keygen -p -P <old-passphrase> -N <new-passphrase> -f <keyfile>
 
@@ -21,3 +27,6 @@ ssh-keygen -lf <keyfile>
 
 # To print the Github-style (MD5) fingerprint of a public key:
 ssh-keygen -E md5 -lf <keyfile>
+
+# To download resident keys from a FIDO2 authenticator to the current directory:
+ssh-keygen -K