Leah Rowe on Nostr: Extremely fun fact: LUKS2 decrypt now works in Libreboot, with these patches: ...

Extremely fun fact:

LUKS2 decrypt now works in Libreboot, with these patches:

https://browse.libreboot.org/lbmk.git/commit/?id=2c0c521e2f15776fd604f8da3bc924dec95e1fd1

https://browse.libreboot.org/lbmk.git/commit/?id=fd6025321c4ae35e69a75b45d21bfbfb4eb2b3a0

https://browse.libreboot.org/lbmk.git/commit/?id=438bf2c9b113eab11439c9c65449e269e5b4b095

GRUB already had LUKS2, but did not support argon2i/id, the most common key derivation on LUKSv2 setups. It still only supported PBKDF2 so you had to do: LUKSv2 with PBKDF2, or use LUKSv1.

These patches imports the PHC argon2i/id implementation, into GRUB:

https://github.com/P-H-C/phc-winner-argon2

Booting encrypted /boot/ in Libreboot GRUB is again possible!