Software question: cryptsetup U2F Authentication

Software
1

Based from this topic, PureOS how-to: System U2F Authentication, I thought about encrypting external storage media devices. To some degree, I was able to get almost all of the desired parameters/options in place.

I am on the next phase, MFA, if there was any support for it. The closest I got was pam-cryptsetup, found on GitHub - google/pam-cryptsetup: Automatic LUKS header updates via PAM. A few downsides. The developer is Google, and the project is discontinued/archived. The worst case scenario is its status as automatic LUKS header updates via PAM. I don’t think that MFA/U2F is taken in consideration. Google may not follow through with development.

Does anyone have an clue about U2F authentication for cryptsetup?

3 Likes
2

Hard topic. I think there have been similar aspirations before: Librem 5 - Unlock LUKS volume with a FIDO2 device - #7 by Loki and Is Librem Key a security key? - #5 by FranklyFlawless but there’s not evidence here they got anywhere. Maybe there’s some clue in those threads to get further.

It would be interesting to hear what you come up with and how it’s set up.

2 Likes