|
|
|
|
|
by adriancr
662 days ago
|
|
What are the benefits of encryption here? If hardware is stolen it will have hardware key attached. It is similar to having unencrypted ssd. Also, someone can temporarily remove the yubikey, fetch the decryption key then place it back. |
|
Key is on my keychain. not attached to the box. I don't need to unlock it remotely. I want to be there and plug my key and touch it and yank it.
> Also, someone can temporarily remove the yubikey, fetch the decryption key then place it back.
If implemented correctly. Nobody can. An encrypted LUKS key would be sent to the yubikey and have it decrypted there. Not the other way.