GBDE - howto 2 factor auth?

From: Aaron Peterson (dopplecoder_at_gmail.com)
Date: 06/30/05 

Date: Thu, 30 Jun 2005 17:51:13 -0400
To: FreeBSD Questions <freebsd-questions@freebsd.org>

I've found a few placed where Poul-Henning Kamp mentions that gbde
will accept any byte string as a passphrase and that the design of
gbde also makes 2 factor authentication possible. I took that to
understand that I might be able to use a file of random data from a
usb key (something I have) and a text passphrase (something I know) to
encrypt my partitions (which I also think Poul mentions somewhere). I
can't find any documentation on how this might be accomplished though.
 The closest thing I've found was a mailing list message from a couple
years ago where someone had written a script to collect the
information and run it through md5 to create a single text string that
could be used on the command line with gbde and the -P/-p switches.
With this md5 method, it seems (to my uneducated mind) that I'd be
taking all the randomness in the file and my passphrase and turning it
into a single fixed length string of lower case letters and numerals.
Seems like there would be a better way. Plus you're putting the
completed passphrase on the commandline where it can potentially be
seen/copied by ps, etc...

Does anyone else know the way this was intended to work? Can I just
pipe the contents of a file to gbde and then it still prompts me for
text that it combines to use for my passphrase? That would be nice if
it were that simple.

Please help :-)
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"

Relevant Pages

  • Re: GBDE - Destroy command not working
    ... So to summarize, in my case, I can only run "destroy": ... # gbde init /dev/da0 -i ... # gbde attach da0 ... Enter passphrase: ...
    (freebsd-questions)
  • gbde misconfiguration ?
    ... enter passphrase for Disk Encryption, ... Configuring Disk Encryption for NO. ... Attach Failed: attempt 1 of 3. ... I dont recall if I enabled gbde. ...
    (freebsd-questions)
  • Encryption Key Question
    ... I'm using SHA-256 has my hash function and AES ... as the encryption method. ... that is the passphrase (currently the string is 306 characters long). ... I hash the passphrase and use it to encrypt the data. ...
    (Security-Basics)
  • Re: Someone said 256 bits is not enough
    ... People string these data together in certain ways, ... logic or reasoning they use is irrelevant, ... accurate prediction than without that context. ... Does that mean I'm more or less safe by using a diceware passphrase than ...
    (sci.crypt)
  • Re: WiFi WPA Pre-Shared Key standard
    ... I ripple my fingers across the keyboard to generate a random PSK ... You're not relying on your own memory to store a passphrase, ... 64-character hexadecimal string and putting that on your flash drive. ...
    (alt.internet.wireless)