Encryption

Setting up YubiKey 2-factor decryption on an encrypted Linux drive (LUKS)

August 5, 2024 • 8 min read

I recently picked up a Yubico YubiKey 5C NFC, a small yet powerful security key that adds an extra layer of protection to my logins. This versatile device supports various security protocols, including FIDO2, U2F, OTP (One-Time Password), and smart card (PIV). Major tech companies like AWS, GitHub, Twitter, Google, Microsoft, and Apple all support security keys for their login processes, highlighting their importance in modern cybersecurity. One of the standout features of the YubiKey is its adherence to open standards, making it easy to integrate with various products and services.

Encrypted LUKS volume inside a file

January 26, 2024 • 2 min read

encryption guides Security

LUKS can be used to encrypt a volume that’s stored inside a single file. Start by creating a 2GB file (1M * 2k) that will hold the LUKS volume and fill it with random bytes. If you’re wondering why the strange filename, Solaris.1971.1080p.BluRay.x264-[YTS.AM].mp4.part, that’s so it is “hidden” as a temporary Transmission torrent file, away from prying eyes (unless your threat model is the NSA). If you want to use a qBittorrent temporary extension, change .