11
Unlocking LUKS with NitroKey/Yubikey: FIDO2, HMAC-SHA1, or OpenPGP? (thebrainbin.org)
submitted 1 month ago by to c/homelab@selfhosted.forum
4 comments fedilink hide all child comments
 

Crossposted from https://thebrainbin.org/m/linux@lemmy.ml/t/1840283

Which approach do you think is better, and why?

  1. FIDO2
  2. HMAC-SHA1
  3. OpenPGP (alternative guide)

Or do you think there is an even better way to use a hardware security token to unlock drives having LUKS full disk encryption?

you are viewing a single comment's thread
view the rest of the comments
[–] [S] 1 point 1 month ago (1 child)

I agree about needing a backup hardware token (or paper recovery key) to restore access if the primary hardware token is lost or broken.

Also agree about requiring a passphrase.

Any specific recommendations on protocol or setup steps?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •