Which approach do you think is better, and why?

  1. FIDO2
  2. HMAC-SHA1
  3. OpenPGP (alternative guide)

Or do you think there is an even better way to use a hardware security token to unlock drives having LUKS full disk encryption?

  • modem_down@thebrainbin.orgOP
    link
    fedilink
    arrow-up
    2
    ·
    1 day ago

    I read them before writing my OP. I’m still not sure what you’re getting at.

    I would be grateful if you could say what you mean, instead of initiating an oblique guessing game.

    • eldavi@lemmy.ml
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 day ago

      instead of initiating an oblique guessing game.

      i don’t understand the hostility.

      i asked a question about needing yubikey software in a ramdisk image to enable decryption at boot time and most of the sources you provided don’t mention it at all.

      • floquant@lemmy.dbzer0.com
        link
        fedilink
        arrow-up
        3
        ·
        11 hours ago

        It’s not mentioned because it’s not required, yubikeys in general mostly leverage pre-existing “smartcard” facilities

      • kkremitzki@lemmy.ml
        link
        fedilink
        arrow-up
        4
        ·
        1 day ago

        i don’t understand the hostility.

        Bystander observation: you were asked to clarify but essentially refused in a way that took more effort than simply doing so.

        • eldavi@lemmy.ml
          link
          fedilink
          English
          arrow-up
          1
          ·
          23 hours ago

          Oic. They didn’t understand that I was asking a question and thought that I was addressing one of their links

          Thanks for helping clarify.