[nola-a]

I use my jump project — it only needs a few lines of Bash using OpenSSL. https://github.com/nolasoft/jump

[nola-a]

The real encrypted journal is hidden among several fake ones, so two authentication factors are used: the key and the journal ID.