No option to encrypt keys ?

[udf2457]

There seems to be a rather odd accidental omisison in tuftool.

As far as I can tell, there is no option to encrypt a locally stored key ?

tuftool root gen-rsa-key doesn't prompt for password and tuftool root gen-rsa-key --help shows no password options.

[jpculp]

@udf2457, thanks for reaching out! You are correct that generating encrypted keys is currently not supported by tuftool, but I'll bring this up with the rest of the team.

[udf2457]

Thansk @jpculp ... I mean, I'd rather have PIV/PKCS#11 support as per issues/537, but encrypted keys would be better than nothing. ;-)