Project Description

The key protector support in GRUB2 is on the way and it currently supports only TPM2. This project is aim to explore the possibility to extend the key protector to support Yubikey to store the LUKS key.

Goal for this Hackweek

• Study the protocols/applications supported by Yubikey
• Read the code of utoken-decrypt
• Implement Yubikey support in GRUB2 if possible

Resources

• Automatic Disk Unlock with TPM2
• utokten-decrypt: Minimal utility for using yubikeys for Full Disk Encryption
• virtual-fido: FIDO2 device emulation (maybe useful for testing)
• Yubikey PIV: Yubikey PIV introduction