Re: cryptsetup LUKS: Too low iteration count: only 14
Michael Kjörling <[email protected]>
| Newsgroups | dev.linux.lists.cryptsetup |
|---|---|
| Message-ID | <[email protected]> |
On 13 Aug 2022 18:11 +0200, from [email protected] (Milan Broz): >> the iteration count was 14 in my case. >> The iteration time that I chose (arbitrarily) is 4123ms which is above >> 4 seconds! > > Please do not confuse iteration for PBKDF2 (default in LUKS1) and memory-hard Argon2 KDF. > > These are completely different algorithms, you cannot compare iteration costs here. 14 iterations in 4123 ms is also about 300 ms per iteration, which would not be at all unreasonable for password hashing. Compare [1] which provides sample output from running the Argon2i reference implementation for two iterations in 188 ms (with four parallell threads) on unspecified hardware; the order of magnitude is certainly about right. [1] https://github.com/P-H-C/phc-winner-argon2/blob/master/README.md#command-line-utility -- Michael Kjörling • https://michael.kjorling.se • [email protected] “Remember when, on the Internet, nobody cared that you were a dog?”