Sure. But you likely have to code it yoruself. FAQ Section 9 can give you a point to start: https://gitlab.com/cryptsetup/cryptsetup/-/wikis/FrequentlyAskedQuestions#9-the-initrd-question BTW, a Youbikey is not a "HSM". It is just a crypto-token. Regards, Arno On Tue, Dec 22, 2020 at 13:01:23 CET, Fabio Martins wrote: > > Hi, > > Would like to know if is it possible to use FDE + low cost HSM (Yubico > like) on boot with LUKS. > > My idea being you need a passphrase (something you know) + something you > have (HSM) to achieve real security. > > If not, is there a direction where such addition can be worked out? > > Thanks. > > -- > > fm > > _______________________________________________ > dm-crypt mailing list > dm-crypt@xxxxxxxx > https://www.saout.de/mailman/listinfo/dm-crypt -- Arno Wagner, Dr. sc. techn., Dipl. Inform., Email: arno@xxxxxxxxxxx GnuPG: ID: CB5D9718 FP: 12D6 C03B 1B30 33BB 13CF B774 E35C 5FA1 CB5D 9718 ---- A good decision is based on knowledge and not on numbers. -- Plato If it's in the news, don't worry about it. The very definition of "news" is "something that hardly ever happens." -- Bruce Schneier _______________________________________________ dm-crypt mailing list dm-crypt@xxxxxxxx https://www.saout.de/mailman/listinfo/dm-crypt
