Re:Mashing Enter to bypass full disk encryption with TPM, Cl...
by tomatocracy on Friday September 01, 2023 @12:19PM
(#37352789)
Another potential use is encrypted root with home directories subsequently requiring login password to decrypt (using pam_ecryptfs, pam_mount, etc). Less secure than root fe needing a PIN/password but can still defend against some threat models.
So there we are somewhat breaking 'Secure Boot' process in general.