Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Could one seperate the kdf from the disk? Actually, not have any kdf?

Don't know about that but you can now use any U2F device (like an old or new Yubikey) to unlock your LUKS partition.

I don't think anybody is bruteforcing that.

EDIT: of course it doesn't help much if law enforcement gets your Yubikey : )



You could enter a password using the Yubikey instead, provided there's a way to input a password. That might make brute-forcing a little challenging especially if you added tamper evidence and heat-sensitive fuses that blow if someone tries to open the case and modify the device. At that point you might be stuck brute forcing with a pen plotter.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: