NitroPad: Secure Laptop with Tamper Detection

Re:NitroPad: Secure Laptop with Tamper Detection by mlosapio on Wednesday January 08, 2020 @07:12AM (#21990665)

Is the dm-crypt decryption key stored on the NitroKey with a pin/passphrase to access the key to mount the decrypted the disk?

[ Parent | on HN ]

Re:NitroPad: Secure Laptop with Tamper Detection by JensRantil on Wednesday January 08, 2020 @07:22AM (#21990733)

From what I understand the key is verifying that BIOS and unencrypted part of disk is unaltered. It is not verifying that any of the encrypted part of the hard drive has been tampered with. As such, it is not storing the hard drive decryption key on the USB stick.

[ Parent | on HN ]

Re:NitroPad: Secure Laptop with Tamper Detection by josteink on Wednesday January 08, 2020 @09:03AM (#21991475)

So this is much like UEFI secure-boot then?

[ Parent | on HN ]

Re:NitroPad: Secure Laptop with Tamper Detection by jans23 on Wednesday January 08, 2020 @09:46AM (#21991862)

Measured boot allows to verify the integrity of the installed firmware (which itself verifies the integrity of the Linux boot partition) by a separate Nitrokey. The idea is that you have your Nitrokey nearby and therefore safe against compromise, other than the laptop which may be left unattended.

[ Parent | on HN ]