diff options
author | Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | 2020-10-05 14:11:02 +0200 |
---|---|---|
committer | Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | 2020-10-05 14:13:14 +0200 |
commit | e0c60bf6a0065ba447b50fcb1bb171725e8bd00d (patch) | |
tree | 0c0e0e12ecde97041218f3637181598eb9fbcd1d /man/homectl.xml | |
parent | b182195acc3f5eeb97b2b4b60d36796b399e5a01 (diff) | |
download | systemd-e0c60bf6a0065ba447b50fcb1bb171725e8bd00d.tar.gz |
man: reword of fido2 key derivation
"keyed by" is indeed a bit jargony. Say " a HMAC hash of the salt combined with
an internal secret key" instead.
For #17177.
Diffstat (limited to 'man/homectl.xml')
-rw-r--r-- | man/homectl.xml | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/man/homectl.xml b/man/homectl.xml index 4b792173a6..f869b3352c 100644 --- a/man/homectl.xml +++ b/man/homectl.xml @@ -357,11 +357,11 @@ <listitem><para>Takes a path to a Linux <literal>hidraw</literal> device (e.g. <filename>/dev/hidraw1</filename>), referring to a FIDO2 security token implementing the - <literal>hmac-secret</literal> extension, that shall be able to unlock the user account. If used, a - random salt value is generated on the host, which is passed to the FIDO2 device, which calculates a - HMAC hash of it, keyed by its internal secret key. The result is then used as key for unlocking the - user account. The random salt is included in the user record, so that whenever authentication is - needed it can be passed again to the FIDO2 token, to retrieve the actual key.</para> + <literal>hmac-secret</literal> extension that shall be able to unlock the user account. A random salt + value is generated on the host and passed to the FIDO2 device, which calculates a HMAC hash of the + salt combined with an internal secret key. The result is then used as the key to unlock the user + account. The random salt is included in the user record, so that whenever authentication is needed it + can be passed again to the FIDO2 token again.</para> <para>Instead of a valid path to a FIDO2 <literal>hidraw</literal> device the special strings <literal>list</literal> and <literal>auto</literal> may be specified. If <literal>list</literal> is |