Mashing Enter to bypass full disk encryption with TPM, Clevis dracut and systemd
1–10 of 135 posts
Re: Mashing Enter to bypass full disk encryption with TPM, Clevis dracut and systemd
#2Mirror [1]
[1] - https://archive.ph/zr3Zf
Re: Mashing Enter to bypass full disk encryption with TPM, Clevis dracut and systemd
#3Mirror [1] [1] - https://archive.ph/zr3Zf
infinite captcha loop
Re: Mashing Enter to bypass full disk encryption with TPM, Clevis dracut and systemd
#4Re: Mashing Enter to bypass full disk encryption with TPM, Clevis dracut and systemd
#5I don't see any encryption bypass there.
Encrypted partition stays encrypted.
Re: Mashing Enter to bypass full disk encryption with TPM, Clevis dracut and systemd
#6I don't see any encryption bypass there. Encrypted partition stays encrypted.
Did you read the article? ;)
> From here it’s easy to manually use the TPM to unlock the disk with the Clevis tooling and mount the root volume for hacking (it takes a few tries sometimes, but it gets there in the end):
They use the exploit to get dropped into a root shell, and then asks the TPM to unlock the disk for them, which it promptly does.
Re: Mashing Enter to bypass full disk encryption with TPM, Clevis dracut and systemd
#7I don't see any encryption bypass there. Encrypted partition stays encrypted.
The system that should only unlock the drive after the appropriate remote command has been provided, unlocks the drive without the remote command being provided. That's the problem.
I'm not sure why you would rely on just the TPM in this case, though. TPM only disk encryption is rather risky, you'd expect a TPM+PIN setup at the very least.
You'd still be at risk because of this flaw, because the root shell would allow sniffing the key from a secure session. Ideally, attempts to brute force the user account should prevent further attempts by rebooting or refusing further interactive input.
Re: Mashing Enter to bypass full disk encryption with TPM, Clevis dracut and systemd
#8Mirror [1] [1] - https://archive.ph/zr3Zf
infinite captcha loop
Are you using Cloudflare's DNS?
Archive.is purposefully gives bad results to Cloudflare's DNS resolvers as they do not respect and pass along EDNS subnet information which Archive wants to run their own CDN.
Re: Mashing Enter to bypass full disk encryption with TPM, Clevis dracut and systemd
#9Earlier quoted context omitted.
infinite captcha loop
Are you using Cloudflare's DNS? Archive.is purposefully gives bad results to Cloudflare's DNS resolvers as they do not respect and pass along EDNS subnet information which Archive wants to run their own CDN. https://jarv.is/notes/cloudflare-dns-archive-is-blocked/
Cloudflare also gives captcha loops if you have a number of different VPN extensions installed.
Re: Mashing Enter to bypass full disk encryption with TPM, Clevis dracut and systemd
#10I don't see any encryption bypass there. Encrypted partition stays encrypted.
Did you read the article? ;) > From here it’s easy to manually use the TPM to unlock the disk with the Clevis tooling and mount the root volume for hacking (it takes a few tries sometimes, but it gets there in the end): They use the exploit to get dropped into a root shell, and then asks the TPM to unlock the disk for them, which it promptly does.
Technically, but really the fault lies in the OS for providing an exploitable prompt that doesn't break the chain of custody of the boot process on failure.