agherzan / yubikey-full-disk-encryption

Use YubiKey to unlock a LUKS partition
Apache License 2.0
795 stars 50 forks source link

No key available with this passphrase. #36

Closed TheRojam closed 5 years ago

TheRojam commented 5 years ago

I was trying adding my yubikey to luks. As i follow the readme it allways say No key available with this passphrase. I do not understand this.

Vincent43 commented 5 years ago

Can you tell us what exactly you do and at which step you see the above message?

TheRojam commented 5 years ago

I am getting this while running this command in my terminal

# anmueller @ AntonsX1Carbon in ~ [22:27:42] C:2
$ sudo ykfde-enroll -d /dev/nvme0n1p2 -s 0 -v
INFO: Setting device to '/dev/nvme0n1p2'.
INFO: Setting LUKS keyslot to '0'.
INFO: Debugging enabled
 > YubiKey slot status 'ykinfo -q -2': 1
WARNING: This script will utilize LUKS keyslot '0' on device '/dev/nvme0n1p2'.  If this is not what you intended, please abort.
 > Please provide the challenge.
   Enter challenge: 

 > Please repeat the challenge.
   Enter challenge: 
   Remember to touch the device if necessary.
   Running: 'ykchalresp -2 *************..
   Received response: '*********'
Please provide the old LUKS passphrase for the existing keyslot.
 Enter passphrase: 
 > Passing '***************************' to 'cryptsetup'
 > Adding new LUKS passphrase with 'cryptsetup --key-slot=0 luksAddKey /dev/nvme0n1p2'...
No key available with this passphrase.

I do this as described here in the README.md

Vincent43 commented 5 years ago
Please provide the old LUKS passphrase for the existing keyslot.
Enter passphrase: 

Are you sure that you provided valid old LUKS passphrase when asked above?

Does sudo cryptsetup luksOpen --test-passphrase /dev/nvme0n1p2 works successful with the same passphrase?

TheRojam commented 5 years ago

The Passphrase was not correct due other Keyboarlayout! :) I switchted to US and now it works :D

Vincent43 commented 5 years ago

That's great!

TheRojam commented 5 years ago

Just in Case: My setup now is working as expected!