Commit Graph

1 Commits

Author SHA1 Message Date
Simon Glass
857835fbf2 scripts: Add tkey_fde_key.py for TKey disk encryption
Add a Python script for TKey-based full disk encryption key generation
and disk encryption operations:

- Generate hardware-backed encryption keys using TKey's Ed25519
  signature and SHA-256 hashing
- Encrypt disk images with LUKS using the derived keys
- Open LUKS encrypted disks using the derived keys
- Support for both interactive password input and file/stdin input
- Automatic TKey device detection via USB enumeration

The script derives deterministic encryption keys from a password and
the TKey's unique device identifier, suitable for unlocking encrypted
root filesystems at boot time.

Co-developed-by: Claude <noreply@anthropic.com>
Signed-off-by: Simon Glass <simon.glass@canonical.com>
2025-12-08 05:22:18 -07:00