fidocrypt(1): `storing' cgd keys on U2F/FIDO keys

2022-08-06 Thread Taylor R Campbell
[bcc tech-crypto@ tech-security@, followups to tech-userlevel@] I would like to import the fidocrypt(1) utility into base: https://github.com/riastradh/fidocrypt/ fidocrypt(1) is a small program that lets you `store' a secret on U2F/FIDO keys, with a little state on disk that enables you to regi

Re: fidocrypt(1): `storing' cgd keys on U2F/FIDO keys

2022-08-06 Thread Taylor R Campbell
> Date: Sat, 6 Aug 2022 18:47:47 -0400 > From: Gabriel Rosenkoetter > > I mostly use macOS at home and Windows at work in that "desktop" context > these days, so I threw up my hands a few years ago and wrote my own > credential manager whose datastore is a USB mass storage device attached > to

cgdconfig(8) support for sharing a main key between disks

2022-08-06 Thread Taylor R Campbell
[bcc tech-crypto@ tech-security@, followups to tech-userlevel@] The attached patch series implements support for sharing a single main key between multiple disks. This way, for instance, you can enter a password once, and the system will compute Argon2id or talk to an interactive hardware token o

Re: fidocrypt(1): `storing' cgd keys on U2F/FIDO keys

2022-08-06 Thread Gabriel Rosenkoetter
On 2022-08-06 21:22 EDT, Taylor R Campbell wrote: To be clear, fidocrypt(1) is not a general-purpose credential manager. A fidocrypt file on disk stores a _single_ secret, which can be opened by any one of the U2F/FIDO devices registered with the file. Yep, caught that, I was just trying to ext

Re: fidocrypt(1): `storing' cgd keys on U2F/FIDO keys

2022-08-06 Thread Gabriel Rosenkoetter
On 2022-08-06 18:28 EDT, Taylor R Campbell wrote: > [bcc tech-crypto@ tech-security@, followups to tech-userlevel@] > > I would like to import the fidocrypt(1) utility into base: > > https://github.com/riastradh/fidocrypt/ > > fidocrypt(1) is a small program that lets you `store' a secret on > U2F