git-credential-ssh(1)

GIT-CREDENTIAL-SSH(1)

User Commands

GIT-CREDENTIAL-SSH(1)

NAME

git-credential-ssh - Helper to store credentials on disk, securing with ssh key

SYNOPSIS

git config credential.helper ssh

DESCRIPTION

This command stores credentials using ssh-agent and ssh-keygen -Y sign features to generate a reasonably random and secure enough byte sequence and XOR-ring it cyclically through credential given. Credential is filtered from data that doesn't apperar in get query, and then an ID is assigned by applying md5sum to the result.

The ID is used as file name to write encrypted store query.

Encryption is performed by signing full path of ID file name as a string with the first matching ssh key in ssh-agent running, extracting a data part of the signature, and then XOR-ring it cyclically through the credential data privided.

Decryption is performed likewise.

Most of the work does sshtoken(1) tool, see manual page for further explanation.

ENVIRONMENT

GIT_CREDENTIAL_SSH defines a directory to store all ID files. Default is $HOME/.config/git-credential-ssh/.

FILES

The $HOME/.config/git-credential-ssh/ID is used to store ID files.