Subject: bug#68694: Feature request: Unlock LUKS volumes using FIDO2 keys

From: DonaldSanders1968 <[email-masked]>
Date: Wed, 24 Jan 2024 16:59:13 +0000

Hi Guix,

Currently It's highly inconvenient to input passwords multiple times with LUKS, especially when one has a total encrypted RAID. Besides what has been done in https://issues.guix.gnu.org/68524, it's also worth considering to allowing using FIDO2 key to unlock LUKS encrypted volumes, like what systemd-cryptenroll or clevis do. I believe it's a perfect balance between security and convenience.

Thanks!