this post was submitted on 31 Jul 2026
15 points (100.0% liked)

Linux

14557 readers
830 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago
MODERATORS
Ategon@programming.dev
anzo@programming.dev
dwraf_of_ignorance@programming.dev
15
Unlocking LUKS with NitroKey/Yubikey: FIDO2, HMAC-SHA1, or OpenPGP? (thebrainbin.org)
submitted 4 days ago by modem_down@thebrainbin.org to c/linux@programming.dev
2 comments fedilink hide all child comments
 

Crossposted from https://thebrainbin.org/m/linux@lemmy.ml/t/1840283

Which approach do you think is better, and why?

  1. FIDO2
  2. HMAC-SHA1
  3. OpenPGP (alternative guide)

Or do you think there is an even better way to use a hardware security token to unlock drives having LUKS full disk encryption?

you are viewing a single comment's thread
view the rest of the comments
[โ€“] bacon_pdp@lemmy.world 7 points 4 days ago (1 children)

Be sure to have something that you type before using physical keys (which can be seized); that way you combine what you know with what you have.

[โ€“] modem_down@thebrainbin.org 2 points 4 days ago

Thanks, please post relevant steps if you have specific recommendations.