Bypass kdf step with LUKS2
Rishi Dhupar <[email protected]> Fri, 23 Jun 2023 10:01:29 -0400
| Newsgroups | dev.linux.lists.cryptsetup |
|---|---|
| Message-ID | <CAJbs9BHP=bu37WAEM_ztReiFUP+rNUVLnPWBdNOmRzjW8Kb_OA@mail.gmail.com> |
Hi, I have an unusual request. Is there any way to skip the PBKDF2 step when a device is being formatted with LUKS2 or an additional slot is being added? Here's why I'm asking: I am using a high entropy 256-bit key as my keyfile and the KDF step is unnecessary and does not improve my security profile. If I am managing thousands of devices and want to rotate the passphrases on them, this KDF step is becoming the major bottleneck in performance. Thanks