Re: F45 Change Proposal: Disable in Kernel Crypto Userspace API (Phase 1) (self-contained)

> On 24 Jul 2026, at 12:12, Peter Robinson <[email protected]> wrote:
> 
>> Cipher:     aes-xts-plain64
>> PBKDF:      argon2id

It's the PBKDF that seems to be the thing I changed from the default.

I found a script to setup the Rpi in question and I tried to convert the image into a luks encrypted one.
But I failed to get that to work. In that script I had this:

    cryptsetup \
        --type luks2 \
        --cipher xchacha20,aes-adiantum-plain64 \
        --hash sha256 \
        --iter-time 5000 \
        --pbkdf argon2i \
            luksFormat ${DEVICE}4

And it is that --cpher that I'm remembering.

> 
> Those are the defaults, what did you actually use?
> 
>> Clearly I will have to migrate to a supported cypher before upgrading to f45.
> 
> Well not for f45 but before long.

Do you mean in F46 or triggered by something like PQC?

Barry

-- 
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new