I need to have a personal ssh key such that:
- I can back up a single file containing my private key, and restore it when I do a new install.
- The private key is never stored in unencrypted form anywhere, including in the file that I back up and restore, but with the necessary exception of my RAM while I am using it.
- Someone with physical access to my machine cannot necessarily use my private key. I should be required to enter a password before it will work, preferably the password to my user account.
- It is not necessary to back up the public key. I should be able to generate that from the private key (but may need sufficient information to decrypt it).
I know that there are a lot of resources explaining how to use ssh key management tools. However, I find them quite complex, and I have proven unable to save my private key when doing new installs in the past. So I would much rather hear some best practices from someone with experience doing exactly what I want to do.