Update 'pkcs11-ssh.md'

pkcs11-ssh.md

@@ -0,0 +1,31 @@
+> OpenSC Official Repo: https://github.com/OpenSC/OpenSC <br>
+> Yubikey's PKCS#11 library works too: `/usr/local/lib/libykcs11.dylib`
+
+OpenSSH can work with PKCS#11:
+```shell
+ssh-keygen -D /Library/OpenSC/lib/opensc-pkcs11.so
+ssh -I /Library/OpenSC/lib/opensc-pkcs11.so root@example.com
+```
+
+Config `~/.ssh/config` also works:
+
+```plain
+PKCS11Provider /Library/OpenSC/lib/opensc-pkcs11.so
+```
+
+<br>
+
+OpenSSH with PKCS#11 aliases:
+```
+alias ssh-keygeni='ssh-keygen -D /Library/OpenSC/lib/opensc-pkcs11.so'
+alias sshi='ssh -I /Library/OpenSC/lib/opensc-pkcs11.so'
+alias sshif='ssh -o "ForwardAgent yes" -I /Library/OpenSC/lib/opensc-pkcs11.so'
+alias scpi='scp -o "PKCS11Provider /Library/OpenSC/lib/opensc-pkcs11.so"'
+```
+
+<br>
+
+# Reference
+1. https://github.com/tpm2-software/tpm2-pkcs11/blob/master/docs/SSH.md
+1. https://github.com/ThomasHabets/simple-tpm-pk11
+1. https://ubuntu.com/server/docs/smart-card-authentication-with-ssh