Hacker GitHub

← All repos

latchset/clevis

View on GitHub ↗ ★ 1,291 Shell

Automated Encryption Framework

7 mentions on Hacker News by 7 people: 0 stories, 7 comments · first 2017-08-31 · latest 2025-01-17

Mentions per year 7 mentions · busiest year 2023 (3)
20082026
AllStoriesComments NewestTopOldest
  1. …Clevis and Tang, network disk decryption that can only decrypt if most of your servers are online. https://github.com/latchset/clevis https://github.com/latchset/tang Or network decryption (SSH into initrd).…
    comment by keeperofdakeys · 2025-01-17 · in Bypassing disk encryption on systems with automatic TPM2 unlock
  2. …to unlock LUKS partitions using network bound disk encryption with https://github.com/latchset/clevis and https://github.com/latchset/tang . Works well, especially as Tang is stateless (so deployment and high availability is
    comment by pacificenigma · 2024-08-20 · in I picked up a shitty NUC from ewaste and it had a label on it for an AI company
  3. …to configure multiple pins even if they're of the same type and authority (ie. the RAID0 of SSS): https://github.com/latchset/clevis#pin-shamir-secret-sharing
    comment by LanternLight83 · 2023-09-16 · in Horcrux: Split your file into encrypted fragments
  4. …(e.g. an insider) removing the server from the data center and being able to access its data. [1] https://github.com/latchset/clevis
    comment by 0xC0ncord · 2023-09-01 · in Mashing Enter to bypass full disk encryption with TPM, Clevis dracut and systemd
  5. …Looks like clevis is gpl3 - so I expect it's not packaged as standard for any of the bsds? https://github.com/latchset/clevis See also: Ed: and: https://github.com/kmille/cryptboot https://security.stackexchange.com/questions/194081/use-tpm…
    comment by e12e · 2023-03-08 · in Initial support for guided disk encryption in OpenBSD installer
  6. …Clevis[1]; last time I was researching this problem, I came across it via Red Hat's docs[2]. [1]: https://github.com/latchset/clevis [2]: https://access.redhat.com/documentation/en-us/red_hat_enterp...
    comment by predakanga · 2021-01-22 · in Unlocking LUKS2 Volumes with TPM2, FIDO2, PKCS#11 Security HW on Systemd 248
  7. …to a better encryption scheme will give us the ability to do locks and per-block validation. [0]: https://github.com/latchset/clevis [1]: https://github.com/npmccallum/clevis/blob/fuse/src/clevis-fu...
    comment by npmccallum · 2017-08-31 · in Bootstrapping Kubernetes Google Cloud Platform without scripts