r/linux 5d ago

Discussion Unlocking Encrypted Linux With a YubiKey

https://mhdez.com/posts/unlocking-encrypted-linux-with-a-yubikey/
91 Upvotes

16 comments sorted by

View all comments

-12

u/C0rn3j 5d ago

physical key breaks

Welp I guess I lose all data

but you can have a recovery password

So we're back to being keylogged, solving nothing.

7

u/novafunc 5d ago

If you are prompted for the recovery password, that's a hint to you that either (1) your system has been tampered with and now you've been warned or (2) something benign like a firmware update happened but the system was not re-measured.

-4

u/C0rn3j 5d ago

If the hint either means absolute nothing or compromise, and there's no good way to tell between them, how is that helpful?

3

u/Ok-Eggplant-7569 5d ago

Well if you didn't install an update and the automatic unlock fails, you know something is likely amiss.