Related to #206, we need to add:
- HMAC-based authentication of the LUKS2 header (~16MB) but
- ~50 minutes with
tpm2_hmac on the hardware TPM chip STMicroelectronics STM0125:00
- ~20 minutes with
tpm2_hmac on Azure's vTPM
- Bump cryptsetup version
>= 2.8.1
- Ubuntu 26.04 will be shipped with
cryptsetup 2.8.4
Related to #206, we need to add:
tpm2_hmacon the hardware TPM chip STMicroelectronics STM0125:00tpm2_hmacon Azure's vTPM>= 2.8.1cryptsetup2.8.4