From: "Vladimir 'φ-coder/phcoder' Serbinenko" <phcoder@gmail.com>
To: The development of GNU GRUB <grub-devel@gnu.org>
Subject: Re: LUKS Encryption and Fingerprint readers?
Date: Thu, 15 Aug 2013 19:27:52 +0200 [thread overview]
Message-ID: <520D0F98.1050208@gmail.com> (raw)
In-Reply-To: <520D06F7.5030900@iam.tj>
On 15.08.2013 18:51, TJ wrote:
> I was searching for any hint that GRUB might support using a fingerprint reading device as input for unlocking encryption.
It's not possible to do securely as fingerprints are not secret. In
fact, there are plenty of owner fingerprints on the laptop.
But encryption key has to be secret. You can't derive secret key from
non-secret data only, it would be like writing encryption key on the
laptop itself.
To retrieve the fingerprint from laptop and reply it into fingerprint
reader is within a reach of computer security student with cheap equipment.
There is some research in using biometrics to derive keys. Best result
is with handwriting: a person writes a secret word on special reader but
even this is pretty weak as researches show.
next prev parent reply other threads:[~2013-08-15 17:28 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-08-15 16:51 LUKS Encryption and Fingerprint readers? TJ
2013-08-15 17:27 ` Vladimir 'φ-coder/phcoder' Serbinenko [this message]
2013-08-29 19:13 ` Glenn Washburn
2013-08-29 20:20 ` TJ
2013-08-30 19:22 ` Glenn Washburn
2013-08-31 9:09 ` TJ
[not found] ` <20130829202042.F058E193308@jmr5021.mindef.local>
2013-08-30 9:10 ` J.Witvliet
2013-08-30 14:38 ` Lennart Sorensen
2013-08-30 15:03 ` TJ
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=520D0F98.1050208@gmail.com \
--to=phcoder@gmail.com \
--cc=grub-devel@gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.