No. Your actually encryption key is a random number not a password. Your password is used to decrypt your actually key which is loaded into memory and used to read encrypted data.
In no configuration is it just stored in clear text.
I have set up many of these systems and every one stores a string (a password) in the TPM which is then fed into the LUKS system as a regular password.
Sounds like luks is borked as well if youre using only tpm state to unlock, which you shouldnt
All of the LUKS integrations literally just store a password and then type that into the thing upon boot
NOTHING works this way it would be horribly insecure and it absolutely doesn’t work that way.
No it’s about how it works. There’s lots of vulns because of it.
No. Your actually encryption key is a random number not a password. Your password is used to decrypt your actually key which is loaded into memory and used to read encrypted data.
In no configuration is it just stored in clear text.
I have set up many of these systems and every one stores a string (a password) in the TPM which is then fed into the LUKS system as a regular password.