Cornelius Kölbel

Results 169 comments of Cornelius Kölbel

I have the same issue on intel. It happens on Ubuntu 18.04 with kernel 4.15 and 5.3. ![image](https://user-images.githubusercontent.com/1908620/97109395-4830cb80-16d3-11eb-88cc-7e308c382340.png) What is this line (https://github.com/cornelinux/yubikey-luks/blob/master/yubikey-luks-suspend#L92) actually supposed to do? I think the...

Do you want to connect your yubikey to the remote sever or to your local machine? I would not recommend plugging your yubikey to your remote server and leave it...

So where do you want to plug in the yubikey? How do you mail the yubikeys (and the devices?)

Thank you for explaining your workflow. > I can no longer use the ssh connection to unlock the disk. I can connect, and type in cryptroot-unlock, but then it will...

I am a big fan of using smartcards (as in uses assymmetric cryptography with a private key protected within the card) and have been doing this since 2005. If you...

Hi Ronan, I am not using decrypt_derived. Would it be possible for you to share same more infos and ideas? Thanks a lot Cornelius

The wakeup does not work for me. However, I checked this PR with the current ``initramfs-suspend`` so maybe there is a problem in the combination. THe system woke up in...

At the moment it is done in key-script line 41. In your notation: ``` final_password_for_slot_2 = yubikey_get_response(user_entered_pin) ``` As the "user entered pin" could be anything (i assume a 12...

...if we only could use a smartcard ;-) So again, you would use local_data to avoid black box brute force. If you wipe the local_data, you need to write. There...

I once implemented the authentication for etoken pro with LUKS. Unfortunately LUKS has only a very limited capability of authentication (in fact the slot's passphrase). So even in this case,...