From a5cbc0fa1cf0868151028679b59caec4bb4b07a9 Mon Sep 17 00:00:00 2001 From: Yu Watanabe Date: Tue, 14 May 2024 18:08:23 +0900 Subject: [PATCH] TODO: fix typo Follow-up for 84bdf71592be032fa4100fb7b0ed0a9345942ece. --- TODO | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/TODO b/TODO index e9cbf571f95..102bdd0a0a9 100644 --- a/TODO +++ b/TODO @@ -135,7 +135,7 @@ Features: links, or loop-util.c for tracking backing files, and other places. * cryptenroll/cryptsetup/homed: add unlock mechanism that combines tpm2 and - fido2, as well as tpm2 + ssh-agent, insipred by ChromeOS' logic: encrypt the + fido2, as well as tpm2 + ssh-agent, inspired by ChromeOS' logic: encrypt the volume key with the TPM, with a policy that insists that a nonce is signed by the fido2 device's key or ssh-agent key. Thus, add unlock/login time the TPM generates a nonce, which is sent as a challenge to the fido2/ssh-agent, which -- 2.47.3