mateusz834

4 ms·

1. 1.▲
   by mateusz834 2mo ago

   or use jj and stop worrying about git jj split --interactive {ref}
2. 2.▲
   by mateusz834 2y ago

   Wouldn't this work with some kind of PKDF instead? Like: Password ---> PKDF ---> PIN And then Password XOR (Key from TPM) -> LUKS But i guess this kind of logic is not for a bootscript, but for tools like systemcd-cryptenroll.
3. 3.▲
   by mateusz834 2y ago

   Personally i would like a way to use TMP2 (with PIN) + password. (i.e. mode where PIN is derived from the password, but is also used to encrypt), so that i do not have to trust the TPM manufacturer.