Emergent Authority: Zero‑Trust Privileged Access via KeyleSSH
Implement KeyleSSH or similar zero‑knowledge PAM to eliminate stored credentials and require multi‑admin cryptographic approval for critical actions.
Patch your PAM to use KeyleSSH or a similar emergent‑authority design; ensure all admin actions require multi‑admin cryptographic approval.
Summary
Tide introduces Emergent Authority, a paradigm where sensitive authority is generated on‑demand and never stored in a central vault. The KeyleSSH PAM system implements this by using zero‑knowledge logins: administrators authenticate locally, and cryptographic conditions generate the session key just in time. No passwords or secrets ever leave the device, and no key is stored on the server. The system also requires cryptographic approval from other admins to execute consequential commands, eliminating single‑point god‑mode accounts. Tide validated the approach with the RACE Cloud Supercomputing Hub, and KeyleSSH can manage tens of thousands of server credentials without holding any of them. The article highlights past PAM breaches (Uber, U.S. Treasury, DOJ) caused by centralised vaults and argues that Emergent Authority removes the catastrophic risk of a compromised vault.
Key changes
- KeyleSSH uses zero‑knowledge logins, no passwords leave the device
- No central vault; session keys generated on‑demand via cryptographic conditions
- Critical commands require cryptographic approval from multiple admins
- Validated with RACE Cloud Supercomputing Hub
- Reduces risk of vault compromise seen in Uber, Treasury, DOJ breaches