search

agherzan / yubikey-full-disk-encryption

Use YubiKey to unlock a LUKS partition
Apache License 2.0
795 stars 50 forks source link

External LUKS header #66

Closed funboytwo closed 3 years ago

funboytwo commented 3 years ago

I currently have my luks header on a usb drive and I’m trying to add ykfde to a free keyslot. However, ykfde-enroll and ykfde-open don’t seem to read out the additional parameters with the syntax -- --header /$headerlocation, so the luks device isn’t recognized. What am I missing?

On another note, the header flag does seem to be recognized byykfde-format since it shows up in luksDump. There’s no way to verify it though since I can’t open it.

funboytwo commented 3 years ago

Scratch that, cloning the git directly as opposed to using the Arch repo package solves this problem and recognizes the extra cryptsetup params with -- --$param

Vincent43 commented 3 years ago

Yes it was recently added to ykfde-open with https://github.com/agherzan/yubikey-full-disk-encryption/commit/3ed7c196a9ace1b184bc6777b4269172df18dedb . Note that ykfde-enroll still doesn't support that.