search

eworm-de / mkinitcpio-ykfde

Full disk encryption with Yubikey (Yubico key)
GNU General Public License v3.0
109 stars 26 forks source link

Need to ask user to "Touch yubikey to continue" #12

Open Fry-kun opened 8 years ago

Fry-kun commented 8 years ago

If programmed with "require user input", yubikey will wait for the user to touch it before generating a response. ykfde should detect this condition and display some message to the user.

If it's not trivial, this can be faked by always asking "Touch yubikey to continue" -- or by looking at how long it takes for Yubikey to respond (if >a few msec, user input is probably required)

Fry-kun commented 8 years ago

This is especially problematic during boot, since it's not clear if I need to touch the yubikey before entering the passphrase (seems like that's the case?)

eworm-de commented 7 years ago

The actual work is done by a udev helper that does not have access to the terminal. So we can not display any messages.

agowa commented 5 years ago

What about just printing If required press the button on your yubikey to continue. Before invoking the udev helper? The message should only be barely visible if it is not required as the boot process silently continues. And if it is required it will stay on screen until the user has pressed the button.