Unlocking LUKS with NitroKey/Yubikey: FIDO2, HMAC-SHA1, or OpenPGP?

submitted by

Crossposted from https://thebrainbin.org/m/linux@lemmy.ml/t/1840283

Which approach do you think is better, and why?

  1. FIDO2
  2. HMAC-SHA1
  3. OpenPGP (alternative guide)

Or do you think there is an even better way to use a hardware security token to unlock drives having LUKS full disk encryption?

2
13

Log in to comment

Hot Top New Old

Be sure to have something that you type before using physical keys (which can be seized); that way you combine what you know with what you have.

 reply
7
OP

Thanks, please post relevant steps if you have specific recommendations.

 reply
2
Insert image