Skip to content

Typing passphrase pretty quickly using Yubikey fails to unlock a LUKS partition

Downstream issue: https://bugs.launchpad.net/ubuntu/+source/plymouth/+bug/2051478

It looks like there are some behavioral changes between 22.02.122 and 23.360.11. I didn't have any issue until recently but after upgrading to 23.360.11 on Ubuntu, the same unlocking method of LUKS partition stopped working.

How to reproduce:

  1. format Yubikey with a static password
$ ykman otp static --generate 2

(it will emit 38 characters and the ENTER event within a moment when a button is long pressed)

  1. add the new key to LUKS
$ sudo cryptsetup luksAddKey /dev/nvme0n1p3
  1. reboot and use the Yubikey to input the passphrase

Actual: it fails to unlock

When typing the same passphrase by-hand it works. Furthermore, when not using Plymouth, both by-hand typing and Yubikey work.

When comparing logs from the two versions, I don't see much hint other than some new debug output such as

../src/libply-splash-core/ply-terminal-emulator.c:983:on_escap: terminal escape character: carriage return

plymouth-debug.log

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information