Qubes LUKS and FIDO

forum.qubes-os.org

Qubes LUKS and FIDO

forum.qubes-os.org

LightscriptionM to

Explorations in Networking and Computing • 5 months ago

Lock LUKS with Nitrokey FIDO U2F - which dracut method?

forum.qubes-os.org

Does anyone foresee any obstacles in implementing a U2F security key lock on Qubes OS LUKS? Systemd has cryptenroll. This is probably as close to trusted boot / U2F secured power up as a Qubes computer could get without HEADS BIOS. This way, at least as long as you keep your security key, no one can turn on your drive without you.

You must log in or register to comment.

Chat

Explorations in Networking and Computing

[email protected]

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]

A place for discussing the new developments in IT networking technologies that strive to enhance and assure privacy, security, and autonomy online, ensuring equitable and strong universal access to information.

You can share info about Confidential Computing software and hardware like Intel SGX enclaves, HSI, attestation, HEADS BIOS, and vendors like Nitrokey, Purism, Fairphone, Open Source Hardware, etc.

The Tor Project, Nym, mixmaster, Yggdrasil, Veilid, and other networking technologies can be discussed here. Questions could be answered by people versed in any of these networking projects.

Also, social media in such networking paradigms could be discussed and be of interest to the wider Mastodon community. You might think about how Amethyst with LND and LNC works, for example. Or have thoughts about developing a social media Veilid application. Facebook has an onion address. What about new networking technologies incorporated into the Fediverse?

1 user / day
1 user / week
5 users / month
31 users / 6 months
9 subscribers
19 Posts
19 Comments
Modlog

mods:
Lightscription