13 ms·
Full disk encryption that are decrypted using a U2F security keys are now here (latest LUKS/systemd allows to do that). And Yubikey don't leak secrets. If you
by TacticalCoder 4y ago
Full disk encryption that are decrypted using a U2F security keys are now here (latest LUKS/systemd allows to do that).
And Yubikey don't leak secrets.
If your system is compromised to the point that someone gets access to the full disk decryption key protected by your Yubikey, you've got bigger problem than securely erasing the disk.
Need to recommission a disk? dd to the disk because why not. Some sectors didn't get dd'ed? Well, the bad guys need your Yubikey too.
So, really, what do we think about Yubikeys?
Are people now going to steal your Yubikey in addition to finding the sectors that weren't overwritten by dd?
- calebio 4y agois the Yubikey protected by some kind of pin or password or something? and is there something that prevents someone from brute forcing that pin/password if they have access to the Yubikey? I've not used a Yubikey in this way before, sounds really neat.