[nycbug-talk] Reducing password fatigue on OpenBSD (or any BSD)

[Eric Radman]

This week I moved /home to a softraid(4) crypto device on my laptop so
that I would no longer need to spend time worrying about about the
consequences of it being lost or stolen. Works great; I just have to
"unlock" the volume on boot

Passphrase: ****************

And log in

login: myself
Password: ****************

And activate my SSH keypairs

$ eval `ssh-agent`
$ ssh-add
Enter passphrase for /home/myself/.ssh/id_XXX: ****************

And I haven't even typed kinit yet.

Are there any well-respected practices for keying off of data stored on
a USB stick? How might one collapse two of these steps in a reasonably
secure way?

Thought it would be worth asking before I wander off and invent a flawed
or brittle shortcut!

-- 
Eric Radman