Zymkey and LUKS sniff attack?

[cbriggs]

I’m evaluating plausible attacks on a field-deployed Raspberry Pi 4 encrypted with LUKS using a Zymkey. The documentation gives an overview of the unlock process:

1. The kernel initializes initramfs
2. initramfs presents the locked LUKS key to Zymkey
3. Zymkey validates the signature and decrypts the key*
4. The decrypted key is presented to LUKS and the root file system is then decrypted

My reading of the above leads me to the assumption that the decrypted key is handed to LUKS plaintext over i2c. I.e, there was no handshake prior in order to use asymmetric keys to securely hand the unlock password across the i2c. Is this correct? Can the data pin be “sniffed” to reveal the password?

Regards

[Bob_of_Zymbit]

@cbriggs - See the answer here:

Is it possible to read decrypted key?

Hello! As I understood: initramfs presents the locked LUKS key to Zymkey Zymkey validates the signature and decrypts the key The decrypted key is presented to LUKS and the root file system is then decrypted Isn’t it possible to read the decrypted key by using a logic analyzer on the I2C lines between the Zymkey and Raspberry Pi? Is there any protection implemented against this type of attack?

[cbriggs]

My apologies. I thought I had searched sufficiently but clearly I hadn’t.

Thank-you kindly for the swift response and answer.