Unlocking LUKS with NitroKey/Yubikey: FIDO2, HMAC-SHA1, or OpenPGP?

Crossposted from https://thebrainbin.org/m/linux@lemmy.ml/t/1840283

Which approach do you think is better, and why?

  1. FIDO2
  2. HMAC-SHA1
  3. OpenPGP (alternative guide)

Or do you think there is an even better way to use a hardware security token to unlock drives having LUKS full disk encryption?

15 points · 2 comments · view on lemmy.world

2 Comments

bacon_pdp@lemmy.world · 7 pts · 13d (1 reply)

Be sure to have something that you type before using physical keys (which can be seized); that way you combine what you know with what you have.

modem_down@thebrainbin.org · 2 pts · 13d

Thanks, please post relevant steps if you have specific recommendations.