On Fri, 8 Oct 2010, Jesse Keating wrote: >> Note that yubikeys are not (yet) usable for this. You cannot request the >> AES key from it (AFAIK), only an OTP. And the OTP can also not be used to unlock >> an AES key on the harddisk because it is different for each activation. > > Can't you use one of the slots on newer yubikeys for a static (long) > passphrase? That could be. I have not used the Yubikey 2 yet. The manual mentions something on page 16 of http://www.yubico.com/files/YubiKey_manual-2.0.pdf but it is confusing to me as it talks about a static password updating the OTP. Paul -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel