Skip to content


Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Yubikey full disk encryption
branch: master


ykfde - yubikey-based full disk encryption

Quick start:

install the package
uuidgen > /boot/yubikey-challenge
ykchalresp $(cat /boot/yubikey-challenge)
cryptsetup luksAddKey /dev/sda2 /boot/yubikey-challenge

On bootup, you will be asked to insert a yubikey (2.2 or newer) which
will then provide the response.  If you do not want to use a yubikey,
press enter and then enter a normal passphrase during bootup.

- uses the default ykchalresp settings, meaning no support for slot 2
- does not update the challenge after each boot.
Something went wrong with that request. Please try again.