Nitrokey support - Githubissues

osresearch / safeboot

Scripts to slightly improve the security of the Linux boot process with UEFI Secure Boot and TPM support

https://safeboot.dev/

GNU General Public License v2.0

270 stars 28 forks source link

Nitrokey support #69

Open osresearch opened 4 years ago

osresearch commented 4 years ago

There are other hardware key tokens, including the open source Nitrokey. Adding support should be a matter of making sure it works with the pkcs11 engine and a key-init script.

osresearch commented 4 years ago

Initial roadblocks:

[ ] PKCS11 support
[ ] x509 cert generation
[ ] OpenSSL engine integration for sbsign
[ ] Performance issues with time-to-sign