Argon2 limits choice
Dmitry Dmitry <[email protected]> Sun, 3 Oct 2021 23:30:13 +0100
| Newsgroups | gmane.linux.kernel.device-mapper.dm-crypt |
|---|---|
| Message-ID | <CAC9D8R6jHQr_fKco1PjGvcJg8rLxHFrPNGxBiNzncj5sONJcWg@mail.gmail.com> |
--===============7612945598409481175==
Content-Type: multipart/alternative; boundary="00000000000095b7d705cd7a5818"
--00000000000095b7d705cd7a5818
Content-Type: text/plain; charset="UTF-8"
Hi,
I am wondering if there are objective reasons for such conservative ***upper**
**hard** limits* for Argon?
} else if (!strcmp(kdf, "argon2i") || !strcmp(kdf, "argon2id")) {
limits->max_iterations = UINT32_MAX;
limits->max_memory = 4*1024*1024; /* 4GiB */
limits->max_parallel = 4;
}
(well, apart from UINT32_MAX, which makes sense, kind of)
Just to reiterate, I am not talking about minimum values, or default
values. The question is about *upper limits*.
P.S.
I was personally thinking about using ~32 threads and ~128GiB of RAM as KDF
parameters...
--
Dmitry
*Sent from my gmail*
GPG/PGP Key fingerprint = 1670 0E8A 4AEC 179D 326F BECE 8B33 360D 8717 9711
--00000000000095b7d705cd7a5818
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr">Hi,<div><br></div><div>I am wondering if there are objecti=
ve reasons for such conservative **<b>upper** **hard** limits</b> for Argon=
?</div><div><br></div><div><font face=3D"monospace">} else if (!strcmp(kdf,=
"argon2i") || !strcmp(kdf, "argon2id")) {<br>=C2=A0 =
=C2=A0limits->max_iterations =3D UINT32_MAX;<br>=C2=A0 =C2=A0limits->=
max_memory =C2=A0 =C2=A0 =3D 4*1024*1024; /* 4GiB */<br>=C2=A0 =C2=A0limits=
->max_parallel =C2=A0 =3D 4;<br>}</font><br clear=3D"all"><div><br></div=
><div>(well, apart from <font face=3D"monospace">UINT32_MAX</font>, which m=
akes sense, kind of)</div><div><br></div><div>Just to reiterate, I am not t=
alking about minimum values, or default values. The question is about <b>up=
per limits</b>.</div><div><br></div><div>P.S.</div><div>I was personally th=
inking about using ~32 threads and ~128GiB of RAM as KDF parameters...</div=
><div><br></div><div><br></div>-- <br><div dir=3D"ltr" class=3D"gmail_signa=
ture" data-smartmail=3D"gmail_signature"><div dir=3D"ltr"><div><div dir=3D"=
ltr">Dmitry<div dir=3D"ltr"><font face=3D"monospace, monospace"><b><u>Sent =
from my gmail</u></b></font></div><div dir=3D"ltr"><span style=3D"font-fami=
ly:monospace"><span style=3D"color:rgb(0,0,0)"><font size=3D"1">GPG/PGP Key=
fingerprint =3D 1670 0E8A 4AEC 179D 326F =C2=A0BECE 8B33 360D 8717 9711</f=
ont></span><br></span></div></div></div></div></div></div></div>
--00000000000095b7d705cd7a5818--
--===============7612945598409481175==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
dm-crypt mailing list -- [email protected]
To unsubscribe send an email to [email protected]
--===============7612945598409481175==--