Skip to content

Commit

Permalink
Write up some docs
Browse files Browse the repository at this point in the history
  • Loading branch information
tfheen committed Mar 13, 2011
1 parent 3a9faf6 commit 16daf22
Showing 1 changed file with 17 additions and 3 deletions.
20 changes: 17 additions & 3 deletions README
Original file line number Diff line number Diff line change
@@ -1,3 +1,17 @@
uuidgen > challenge
ykchalresp $(cat challenge)
cryptsetup luksAddKey /dev/sda2

ykfde - yubikey-based full disk encryption

Quick start:

install the package
uuidgen > /boot/yubikey-challenge
ykchalresp $(cat /boot/yubikey-challenge)
cryptsetup luksAddKey /dev/sda2 /boot/yubikey-challenge

On bootup, you will be asked to insert a yubikey (2.2 or newer) which
will then provide the response. If you do not want to use a yubikey,
press enter and then enter a normal passphrase during bootup.

Limitations/bugs:
- uses the default ykchalresp settings, meaning no support for slot 2
- does not update the challenge after each boot.

0 comments on commit 16daf22

Please sign in to comment.