Re:PSA: Upgrade your LUKS key derivation function
by xaduha on Tuesday April 18, 2023 @11:12AM
(#35615058)
Sure, knock yourself out if that's your thing. But what I meant was basically "power user" level devices, like what systemd-cryptenroll lists. So fido2, pkcs11 (smartcards and tokens) and tpm2. If you want to bury any of them in the woods, I guess you can.
https://www.freedesktop.org/software/systemd/man/systemd-cry...
Of course all this info has to be double checked to see if it actually works, and forensic tools run against the phone to be really really sure the key's not being written to Flash in any way, or remains in RAM after a reboot.