random-archer / mkinitcpio-systemd-tool

Provisioning tool for systemd in initramfs (systemd-tool)
https://www.archlinux.org/packages/community/any/mkinitcpio-systemd-tool/
Other
112 stars 27 forks source link

FIDO2 PIN input support #99

Open MkfsSion opened 2 years ago

MkfsSion commented 2 years ago

Currently, systemd-cryptsetup asks FIDO2 PIN via ask_password_auto() call, but with NULL argument for id parameter, which makes list_ask_files fail to identify ask request. According to Password Agents Specification

As soon as a file named “ask.xxxx” shows up, read it. It’s a simple .ini file that may be parsed with the usual parsers. The xxxx suffix is randomized.

It's seems that the current implementation doesn't comply with that.