Re: [dm-crypt] FDE with passphrase + low cost HSM in LUKS on boot

Sure. But you likely have to code it yoruself. FAQ Section 9
can give you a point to start: 

   https://gitlab.com/cryptsetup/cryptsetup/-/wikis/FrequentlyAskedQuestions#9-the-initrd-question

BTW, a Youbikey is not a "HSM". It is just a crypto-token.

Regards,
Arno


On Tue, Dec 22, 2020 at 13:01:23 CET, Fabio Martins wrote:
> 
> Hi,
> 
> Would like to know if is it possible to use FDE + low cost HSM (Yubico
> like) on boot with LUKS.
> 
> My idea being you need a passphrase (something you know) + something you
> have (HSM) to achieve real security.
> 
> If not, is there a direction where such addition can be worked out?
> 
> Thanks.
> 
> --
> 
> fm
> 
> _______________________________________________
> dm-crypt mailing list
> [email protected]
> https://www.saout.de/mailman/listinfo/dm-crypt

-- 
Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: [email protected]
GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D 9718
----
A good decision is based on knowledge and not on numbers. -- Plato

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier
_______________________________________________
dm-crypt mailing list
[email protected]
https://www.saout.de/mailman/listinfo/dm-crypt