This project is not maintained. Development will continue at https://github.com/akamai/akr.

kr enables SSH to authenticate with a key stored in a Krypton (iOS or Android) mobile app. kr runs as an SSH agent, called krd. When a Krypton private key operation is needed for authentication, krd routes this request to the paired mobile phone, where the user decides whether to allow the operation or not. The private key never leaves the phone.

kr also enables Git Commit/Tag signing with a key stored in Krypton. kr includes an interface to gpg, called krgpg, that can talk with git in order to pgp-sign git commits and tags.

kr currently supports MacOS (10.10+) and Linux (64 Bit) (Debian, RHEL, CentOS, Fedora with systemd).

curl https://krypt.co/kr | sh

We use go modules for easy dependency management.

• Install Go 1.13+

make install
make start
kr pair

Check out CONTRIBUTING.md

Krypton follows a 7-day disclosure policy. If you find a security flaw, please send it to disclose@krypt.co encrypted to the PGP key with fingerprint B873685251A928262210E094A70D71BE0646732C (find the full key here). We ask that you delay publication of the flaw until we have published a fix, or seven days have passed.

We are currently working on a new license for Krypton. For now, the code is released under All Rights Reserved.