yubikey-luks

yubikey-luks copied to clipboard

I have an encrypted luks1 /boot partition. I enter a password to get to the grub boot menu. Then when I select a Kernel I have to provide a different...

ChrTall

Adding support for 1FA also for yubikey-luks-open

Szewcson

Using in 1FA mode with multiple drives

2

I may just be doing something wrong in my setup but I am trying to use the 1FA mode with 8 SSD's at boot. I am running a freshly installed...

Brando753

Added 1FA hardware hash support

5

# Overview As noted in the [Readme](https://github.com/cornelinux/yubikey-luks#use-1fa-to-allow-unattended-passwordless-boot) 1FA offers weaker security as an attacker only needs to gain access to your bootable medium and yubikey to be able to decrypt...

Samdaaman

Would it make sense to include some LUKS partition data item to make the response unique?

3

This week I have discovered the _yubikey-luks_ package inside debian/ubuntu. I'm reading up a bit on how the mechanism works. Now I'm left with the following question. IIUC the resulting...

cobratbq

apt package yubikey-luks isn't up to date

3

First, thank a lot for this wonderful project. I need to use 1FA and I noticed that the apt package doesn't yet support it. I'm currently building the deb file...

Liad-n

Can not extract initramfs image properly (Ubuntu 18.04.1 LTS (Bionic Beaver))

7

System startup usually works very well with Yubikey-luks, but when I try to suspend I get the following errors. The first one is: ``` $ sudo /usr/lib/yubikey-luks-suspend/yubikey-luks-suspend gzip: stdin: not...

erolg

Test for valid LUKS device

3

As is, the luks enroll and luks-open script ask for passwords before determining if the device is even valid. cryptsetup provides a method for testing if a partition is valid...

metalsp0rk

Cannot use Yubikey keyslot to manage keys

4

It seems that a Yubikey keyslot can only be used to unlock on bootup, but not to manage LUKS once logged in, such as adding and changing keys. This would...

HackSane

Doesn't work on Devuan/non systemd

1

How difficult would it be to modify this to work on Devuan, which is Debian minus systemd? This looks like a great tool, and I have a yubikey just sitting...

VulcanRidr