Re: [PATCH] 90crypt: keys on external devices support

["Amadeusz Żołnowski" <aidecoe-2qtfh70TtYba5EbDDlwbIw@public.gmane.org>]

[-- Attachment #1: Type: text/plain, Size: 1475 bytes --]

Excerpts from Mr Dash Four's message of Tue Oct 19 15:54:48 +0200 2010:
> I am currently trying to modify dracut (I am on up-to-date FC13
> x86_64) so that it enables me to use my smartcard token to unlock (and
> use) a boot partition. As a secondary task I would then try and
> automate a similar process (through the smartcard event manager -
> pkcs11_eventmgr) when the card is inserted to automatically ask for
> pin and unlock LUKS partitions.
> 
> That was the reason I have stumbled across this patch -
> http://www.spinics.net/lists/linux-initramfs/msg01402.html and the
> subsequent response that it has been included in the repository for
> dracut. That was a couple of months ago.
>
> Could you tell me whether this feature is already implemented in
> FC13/FC14 repositories and if not what are the plans?

Experimental support is in Dracut 007.  In future 008 it will be even
better (see my latest patches).  There are some improvements I'm working
on.  Although I'm not sure which version Fedora supports, will support
and when.


> I am also interested to see whether there are plans (or, indeed
> attempted implementations) to introduce smartcard support to LUKS
> partitions (boot or not)? Many thanks

I haven't planned that and haven't heard of anybody planning that, but
if I would have such a gadget I'd probably be happy to implement support
for it soon or later.
-- 
Amadeusz Żołnowski

PGP key fpr: C700 CEDE 0C18 212E 49DA  4653 F013 4531 E1DB FAB5

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 490 bytes --]