Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Can I use LUKS or cryptsetup with a more secure (external) medium for key storage, e.g. TPM or a smartcard?

April 26, 2017cryptsetup external key luks medium Secure smartcard storage TPM

0

Posted

Can I use LUKS or cryptsetup with a more secure (external) medium for key storage, e.g. TPM or a smartcard?

1 Answer

0

Posted

Yes, see the answers on using a file-supplied key. You do have to write the glue-logic yourself though. Basically you can have cryptsetup read the key from STDIN and write it there with your own tool that in turn gets the key from the more secure key storage.