Argon2 limits choice

Dmitry Dmitry <[email protected]> Sun, 3 Oct 2021 23:30:13 +0100
Newsgroups gmane.linux.kernel.device-mapper.dm-crypt
Message-ID <CAC9D8R6jHQr_fKco1PjGvcJg8rLxHFrPNGxBiNzncj5sONJcWg@mail.gmail.com>
--===============7612945598409481175==
Content-Type: multipart/alternative; boundary="00000000000095b7d705cd7a5818"

--00000000000095b7d705cd7a5818
Content-Type: text/plain; charset="UTF-8"

Hi,

I am wondering if there are objective reasons for such conservative ***upper**
**hard** limits* for Argon?

} else if (!strcmp(kdf, "argon2i") || !strcmp(kdf, "argon2id")) {
   limits->max_iterations = UINT32_MAX;
   limits->max_memory     = 4*1024*1024; /* 4GiB */
   limits->max_parallel   = 4;
}

(well, apart from UINT32_MAX, which makes sense, kind of)

Just to reiterate, I am not talking about minimum values, or default
values. The question is about *upper limits*.

P.S.
I was personally thinking about using ~32 threads and ~128GiB of RAM as KDF
parameters...


-- 
Dmitry
*Sent from my gmail*
GPG/PGP Key fingerprint = 1670 0E8A 4AEC 179D 326F  BECE 8B33 360D 8717 9711

--00000000000095b7d705cd7a5818
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi,<div><br></div><div>I am wondering if there are objecti=
ve reasons for such conservative **<b>upper** **hard** limits</b> for Argon=
?</div><div><br></div><div><font face=3D"monospace">} else if (!strcmp(kdf,=
 &quot;argon2i&quot;) || !strcmp(kdf, &quot;argon2id&quot;)) {<br>=C2=A0 =
=C2=A0limits-&gt;max_iterations =3D UINT32_MAX;<br>=C2=A0 =C2=A0limits-&gt;=
max_memory =C2=A0 =C2=A0 =3D 4*1024*1024; /* 4GiB */<br>=C2=A0 =C2=A0limits=
-&gt;max_parallel =C2=A0 =3D 4;<br>}</font><br clear=3D"all"><div><br></div=
><div>(well, apart from <font face=3D"monospace">UINT32_MAX</font>, which m=
akes sense, kind of)</div><div><br></div><div>Just to reiterate, I am not t=
alking about minimum values, or default values. The question is about <b>up=
per limits</b>.</div><div><br></div><div>P.S.</div><div>I was personally th=
inking about using ~32 threads and ~128GiB of RAM as KDF parameters...</div=
><div><br></div><div><br></div>-- <br><div dir=3D"ltr" class=3D"gmail_signa=
ture" data-smartmail=3D"gmail_signature"><div dir=3D"ltr"><div><div dir=3D"=
ltr">Dmitry<div dir=3D"ltr"><font face=3D"monospace, monospace"><b><u>Sent =
from my gmail</u></b></font></div><div dir=3D"ltr"><span style=3D"font-fami=
ly:monospace"><span style=3D"color:rgb(0,0,0)"><font size=3D"1">GPG/PGP Key=
 fingerprint =3D 1670 0E8A 4AEC 179D 326F =C2=A0BECE 8B33 360D 8717 9711</f=
ont></span><br></span></div></div></div></div></div></div></div>

--00000000000095b7d705cd7a5818--

--===============7612945598409481175==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
dm-crypt mailing list -- [email protected]
To unsubscribe send an email to [email protected]

--===============7612945598409481175==--