Mashing Enter to bypass full disk encryption with TPM, Clevis dracut and systemd

Re:Mashing Enter to bypass full disk encryption with TPM, Cl... by 0xC0ncord on Friday September 01, 2023 @12:01PM (#37352509)

The threat vector mitigated by Clevis[1] is someone with physical access (e.g. an insider) removing the server from the data center and being able to access its data.

[1] https://github.com/latchset/clevis

[ Parent | on HN ]

Re:Mashing Enter to bypass full disk encryption with TPM, Cl... by hedora on Friday September 01, 2023 @12:48PM (#37353205)

I don't see any discussion of threat vectors on that page, but Clevis clearly fails to mitigate the threat vector you describe.

[ Parent | on HN ]

Re:Mashing Enter to bypass full disk encryption with TPM, Cl... by flangola7 on Friday September 01, 2023 @01:22PM (#37353719)

You can't read encrypted data without the key

[ Parent | on HN ]