Which approach do you think is better, and why?

  1. FIDO2
  2. HMAC-SHA1
  3. OpenPGP (alternative guide)

Or do you think there is an even better way to use a hardware security token to unlock drives having LUKS full disk encryption?

      • modem_down@thebrainbin.orgOP
        link
        fedilink
        arrow-up
        2
        ·
        1 day ago

        I read them before writing my OP. I’m still not sure what you’re getting at.

        I would be grateful if you could say what you mean, instead of initiating an oblique guessing game.

        • eldavi@lemmy.ml
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 day ago

          instead of initiating an oblique guessing game.

          i don’t understand the hostility.

          i asked a question about needing yubikey software in a ramdisk image to enable decryption at boot time and most of the sources you provided don’t mention it at all.

          • floquant@lemmy.dbzer0.com
            link
            fedilink
            arrow-up
            3
            ·
            11 hours ago

            It’s not mentioned because it’s not required, yubikeys in general mostly leverage pre-existing “smartcard” facilities

          • kkremitzki@lemmy.ml
            link
            fedilink
            arrow-up
            4
            ·
            1 day ago

            i don’t understand the hostility.

            Bystander observation: you were asked to clarify but essentially refused in a way that took more effort than simply doing so.

            • eldavi@lemmy.ml
              link
              fedilink
              English
              arrow-up
              1
              ·
              23 hours ago

              Oic. They didn’t understand that I was asking a question and thought that I was addressing one of their links

              Thanks for helping clarify.