Bypass kdf step with LUKS2

Rishi Dhupar <[email protected]> Fri, 23 Jun 2023 10:01:29 -0400
Newsgroups dev.linux.lists.cryptsetup
Message-ID <CAJbs9BHP=bu37WAEM_ztReiFUP+rNUVLnPWBdNOmRzjW8Kb_OA@mail.gmail.com>
Hi,

I have an unusual request. Is there any way to skip the PBKDF2 step
when a device is being formatted with LUKS2 or an additional slot is
being added?

Here's why I'm asking: I am using a high entropy 256-bit key as my
keyfile and the KDF step is unnecessary and does not improve my
security profile. If I am managing thousands of devices and want to
rotate the passphrases on them, this KDF step is becoming the major
bottleneck in performance.

Thanks