News for hackers. Stuff that matters.
Re:Mashing Enter to bypass full disk encryption with TPM, Cl... by betaby on Friday September 01, 2023 @12:05PM (#37352565)
Looks like so. From https://rogueai.github.io/posts/arch-luks-tpm/#unlock-the-lu... 'From a security point of view, passwordless LUKS unclocking might look like we’re giving up some security, as booting will go straight to login without asking any password whatsoever. We’re indeed trading a bit of security in favour of convenience, it’s important to note though that binding the LUKS to the TPM ensures the volume will only unlock in our machine, with Secure Boot enabled and our signed boot image.'

So there we are somewhat breaking 'Secure Boot' process in general.

Re:Mashing Enter to bypass full disk encryption with TPM, Cl... by tomatocracy on Friday September 01, 2023 @12:19PM (#37352789)
Another potential use is encrypted root with home directories subsequently requiring login password to decrypt (using pam_ecryptfs, pam_mount, etc). Less secure than root fe needing a PIN/password but can still defend against some threat models.