2022-12-06 22:29:07 -08:00
|
|
|
#!/usr/bin/env bash
|
2022-09-18 15:13:50 -07:00
|
|
|
key_length=512
|
|
|
|
|
iterations="$(head -n 2 /boot/crypted-storage/default)"
|
|
|
|
|
salt="$(head -n 1 /boot/crypted-storage/default)"
|
|
|
|
|
chal="$(echo -n $salt | openssl dgst -binary -sha512 | rbtohex)"
|
|
|
|
|
resp="$(ykchalresp -2 -x $chal 2>/dev/null)"
|
|
|
|
|
user_key="$(read -s)"
|
|
|
|
|
luks_key="$(echo -n $user_key | pbkdf2-sha512 $(($key_length / 8)) $iterations $resp | rbtohex)"
|
|
|
|
|
echo -n $luks_key | hextorb | sudo cryptsetup luksOpen /dev/sda2 crypted --key-file=-
|
