Post #3015584

@neil Slight correction: whether resident or not, the private key is derived from the key material that lives inside the security key (Yubikey). The difference is that with a resident key, the information needed to derive the key is stored in the hardware too. With non-resident, that bit of metadata lives in the private key file. It's not actually a private key in there.