Yubikey full disk encryption
|debian||Fix Depends to "yubikey-personalization"|
|README||Write up some docs|
|helper||Add udevadm settle to make bootups with the key plugged in work better|
|hook||Get rid of local hacks, add postinst that recreates initramfs|
ykfde - yubikey-based full disk encryption Quick start: install the package uuidgen > /boot/yubikey-challenge ykchalresp $(cat /boot/yubikey-challenge) cryptsetup luksAddKey /dev/sda2 /boot/yubikey-challenge On bootup, you will be asked to insert a yubikey (2.2 or newer) which will then provide the response. If you do not want to use a yubikey, press enter and then enter a normal passphrase during bootup. Limitations/bugs: - uses the default ykchalresp settings, meaning no support for slot 2 - does not update the challenge after each boot.