1. Introduction

このページは RFC 9987 の該当節を要約し, SSH agent protocol の番号, メッセージ名, セキュリティ要件を保持します.

Secure Shell (SSH) [RFC4251] provides secure remote connections and login over untrusted networks. It supports public key authentication and other authentication mechanisms.

This document specifies a protocol for interacting with a key management component, usually called an agent, that holds private keys. SSH clients, and possibly SSH servers, can invoke the agent to perform operations using public and private keys held by the agent.

Keeping keys in an agent avoids repeatedly loading and unwrapping private keys, supports optional forwarding across an SSH connection, and can reduce attack surface by isolating key handling in a smaller component.