README_CR

   1 Adapted from Yubico's white paper on full disk encryption:
   2
   3 user record:
   4         userid
   5         seqno
   6         encrypted blob:
   7                 data:
   8                         shared-secret
   9                         payload
  10                         sha1(
  11                                 shared-secret
  12                                 payload
  13                         )
  14                 key:
  15                         hmac-sha1:
  16                                 data:
  17                                         sha1(
  18                                                 userid
  19                                                 password
  20                                                 seqno
  21                                         )
  22                                 key:
  23                                         shared-secret
  24
  25