Sign me off|in
an invention by mkoutny
Updated almost 2 years ago. 1 hackers ♥️. 3 followers.

Project Description

It is possible to sign (off) git commits with your SSH key. The very same key that's used to sign in to SSH servers. I would like to look into the buffer contents in the two cases and examine if/how they are replacable. (I.e. sign a commit during ssh authentication.)

Goal for this Hackweek

Show that sshd cannot sign git commits.

Resources

  • https://calebhearth.com/sign-git-with-ssh
  • https://github.com/openssh/openssh-portable/blob/master/PROTOCOL.key

Looking for hackers with the skills:

ssh git cryptography

This project is part of:

Hack Week 22

Activity

  • almost 2 years ago: mkoutny started this project.
  • almost 2 years ago: dancermak liked this project.
  • almost 2 years ago: mkoutny added keyword "git" to this project.
  • almost 2 years ago: mkoutny added keyword "cryptography" to this project.
  • almost 2 years ago: mkoutny added keyword "ssh" to this project.
  • almost 2 years ago: mkoutny originated this project.


    • Comments

    • mkoutny
      almost 2 years ago by mkoutny | Reply

      Finished. I found no way how to confuse the signing/authenticating protocol. Details in "slides".

    Similar Projects

    Explore the integration between OBS and GitHub by pdostal

    Project Description

    The goals:

    1) When GitHub pull request is created or modified the OBS project will be forked and the build results reported back to GitHub. 2) When new version of the GitHub project will be published the OBS will redownload the source and rebuild the project.

    Goal for this Hackweek

    Do as much as possible, blog about it and maybe use it another existing project.

    Resources

    Port git-fixup to POSIX shell script and submit to git/git by mcepl

    Description

    https://github.com/keis/git-fixup is an exceedingly useful program, which I use daily, and I would love to every git user could bask in its awesomeness. Alas, it is a bash script, so it is not appropriate for the inclusion in git proper.

    Goals

    Port the script to plain POSIX shell and submit for consideration to git@vger.kernel.org

    Resources