FDE with passphrase + low cost HSM in LUKS on boot

"Fabio Martins" <fm.crypt1-A9NOJZT0aBw2xdFDp/[email protected]> Tue, 22 Dec 2020 09:01:23 -0300
Newsgroups gmane.linux.kernel.device-mapper.dm-crypt
Message-ID <[email protected]>
Hi,

Would like to know if is it possible to use FDE + low cost HSM (Yubico
like) on boot with LUKS.

My idea being you need a passphrase (something you know) + something you
have (HSM) to achieve real security.

If not, is there a direction where such addition can be worked out?

Thanks.

--

fm

_______________________________________________
dm-crypt mailing list
[email protected]
https://www.saout.de/mailman/listinfo/dm-crypt