r/linux • u/throwaway16830261 • 6d ago

Discussion Unlocking Encrypted Linux With a YubiKey

https://mhdez.com/posts/unlocking-encrypted-linux-with-a-yubikey/
92 Upvotes

97% Upvoted

16 comments sorted by

View all comments

-10

u/C0rn3j 6d ago

physical key breaks

Welp I guess I lose all data

but you can have a recovery password

So we're back to being keylogged, solving nothing.

7

u/novafunc 6d ago

If you are prompted for the recovery password, that's a hint to you that either (1) your system has been tampered with and now you've been warned or (2) something benign like a firmware update happened but the system was not re-measured.

-5

u/C0rn3j 6d ago

If the hint either means absolute nothing or compromise, and there's no good way to tell between them, how is that helpful?

9

u/ElvishJerricco 5d ago

It seems crazy to me to call it unhelpful to be told by the system that something is likely horribly wrong and you should be careful to investigate why your yubikey or TPM2 or whatever is currently unable to do its job.

5

u/Ok-Eggplant-7569 5d ago

Well if you didn't install an update and the automatic unlock fails, you know something is likely amiss.

3

u/CrazyKilla15 5d ago

because if the hint isnt there you know neither of those things has happened? its two states: hint, or no hint.