diff --git a/man/crypttab.xml b/man/crypttab.xml index 04695f626f..93c0ec01e4 100644 --- a/man/crypttab.xml +++ b/man/crypttab.xml @@ -568,7 +568,6 @@ external /dev/sda3 keyfile:LABEL=keydev keyfile-timeout=10s,cipher=xchac A few notes on the above: - We use RSA (and not ECC), since Yubikeys support PKCS#11 Decrypt() only for RSA keys We use RSA2048, which is the longest key size current Yubikeys support LUKS key size must be shorter than 2048bit due to RSA padding, hence we use 128 bytes We use Yubikey key slot 9d, since that's apparently the keyslot to use for decryption purposes,