Project

General

Profile

Actions

action #152831

open

[upstream] cryptsetup: implement recovery key generation in cryptsetup

Added by lnussel 5 months ago. Updated 4 months ago.

Status:
New
Priority:
Normal
Assignee:
-
Target version:
-
Start date:
2023-12-21
Due date:
% Done:

20%

Estimated time:

Description

cryptsetup luksFormat/reencrypt requires entering a passphrase. It could just as well offer to generate a random recovery key like systemd-cryptenroll. The key could be put in the kernel keyring afterwards so can be retrieved.

Actions

Also available in: Atom PDF