Linux

14557 readers

815 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev

Unlocking LUKS with NitroKey/Yubikey: FIDO2, HMAC-SHA1, or OpenPGP? (thebrainbin.org)

submitted 4 days ago by modem_down@thebrainbin.org to c/linux@programming.dev

2 comments fedilink hide all child comments

Crossposted from https://thebrainbin.org/m/linux@lemmy.ml/t/1840283

Which approach do you think is better, and why?

FIDO2

HMAC-SHA1

OpenPGP (alternative guide)

Or do you think there is an even better way to use a hardware security token to unlock drives having LUKS full disk encryption?

top 2 comments

sorted by: hot top controversial new old

[–] bacon_pdp@lemmy.world 7 points 4 days ago (1 children)

Be sure to have something that you type before using physical keys (which can be seized); that way you combine what you know with what you have.

[–] modem_down@thebrainbin.org 2 points 4 days ago

Thanks, please post relevant steps if you have specific recommendations.