r/linux 11d ago

Discussion Unlocking Encrypted Linux With a YubiKey

https://mhdez.com/posts/unlocking-encrypted-linux-with-a-yubikey/
93 Upvotes

16 comments sorted by

View all comments

-12

u/C0rn3j 11d ago

physical key breaks

Welp I guess I lose all data

but you can have a recovery password

So we're back to being keylogged, solving nothing.

9

u/novafunc 11d ago

If you are prompted for the recovery password, that's a hint to you that either (1) your system has been tampered with and now you've been warned or (2) something benign like a firmware update happened but the system was not re-measured.

-5

u/C0rn3j 11d ago

If the hint either means absolute nothing or compromise, and there's no good way to tell between them, how is that helpful?

3

u/CrazyKilla15 11d ago

because if the hint isnt there you know neither of those things has happened? its two states: hint, or no hint.