Clevis and Tang - Securing Your Secrets at Rest

Explore the world of network bound encryption in this 47-minute conference talk from linux.conf.au 2020. Dive into the Clevis and Tang tools, which offer innovative solutions for securing secrets at rest while addressing common challenges of encryption deployment. Learn about McCallum-Relyea exchange and Shamir's Secret Sharing algorithm, and witness a live demonstration of setting up automatic LUKS volume decryption using Tang servers. Gain insights into use cases, limitations, and potential threats associated with these cutting-edge security tools.