clevis.go
clevis.go copied to clipboard
Implement fingerprint encryption/decryption
It is a counterpart for the upstream issue https://github.com/latchset/clevis/issues/245
Some computers (e.g. Lenovo Thinkpad X1 Yoga) have a built in fingerprint sensor. This would be a good candidate for a clevis pin. Having a clevis-fingerprint pin will allow to have a full-disk-encryption with fingerprint unlock functionality. That is a convenient and secure way to protect the user data.
I haven't really looked at fingerprint API but I found a few projects that actively use this functionality. It is something that can give pointers on utilizing fingerprint sensor in celvis.
https://gitlab.freedesktop.org/libfprint/fprintd/-/blob/master/pam/pam_fprintd.c https://gitlab.freedesktop.org/libfprint/fprintd/-/tree/master https://gitlab.freedesktop.org/libfprint/libfprint