Re: cryptsetup LUKS: Too low iteration count: only 14

Michael Kjörling <[email protected]>
Newsgroups dev.linux.lists.cryptsetup
Message-ID <[email protected]>
On 13 Aug 2022 18:11 +0200, from [email protected] (Milan Broz):
>> that the iteration count was 14 in my case.
>> The iteration time that I chose (arbitrarily) is 4123ms
> 
> If you set 100k iteration with 1G memory cost for Argon2, you will get
> unlocking time that is perhaps in years... :-)

Out of curiosity, how did you arrive at the "years" order of
magnitude? Is there an exponential component involved somewhere when
increasing the iteration count?

Naiively, OP's stated 14 iterations in 4123 ms is about 295 ms per
iteration (let's call it a nice and round 300 ms); 300 ms times 100K
is 30M ms = 30K s, or some eight hours. Certainly a good long while to
wait, but still a very far cry from even one year.

To get to a year at that performance, I'd expect an iteration count on
the order of 100M, not 100K, to be needed. (8 hours is about 1/1100 of
one year.)

-- 
Michael Kjörling • https://michael.kjorling.se • [email protected]
 “Remember when, on the Internet, nobody cared that you were a dog?”
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.