Search for a SHA256 fingerprint in key files within a directory

search-sha256-key-fingerprint.sh

#!/bin/bash

extract_fingerprint() {
  ssh-keygen -lf "$1" -E sha256 2>/dev/null | awk '{print $2}'
}

if [ "$#" -ne 2 ]; then
  echo "Usage: $0 <DIRECTORY> <SHA256_FINGERPRINT>"
  exit 1
fi

DIRECTORY=$1
SHA256_FINGERPRINT=$2

find "$DIRECTORY" -type f | while read -r file; do
  FILE_FINGERPRINT=$(extract_fingerprint "$file")
  
  if [ "$FILE_FINGERPRINT" == "$SHA256_FINGERPRINT" ]; then
    echo "Match found: $file"
  fi
done