Re: cryptsetup LUKS: Too low iteration count: only 14
Michael Kjörling <[email protected]>
| Newsgroups | dev.linux.lists.cryptsetup |
|---|---|
| Message-ID | <[email protected]> |
On 13 Aug 2022 18:11 +0200, from [email protected] (Milan Broz): >> that the iteration count was 14 in my case. >> The iteration time that I chose (arbitrarily) is 4123ms > > If you set 100k iteration with 1G memory cost for Argon2, you will get > unlocking time that is perhaps in years... :-) Out of curiosity, how did you arrive at the "years" order of magnitude? Is there an exponential component involved somewhere when increasing the iteration count? Naiively, OP's stated 14 iterations in 4123 ms is about 295 ms per iteration (let's call it a nice and round 300 ms); 300 ms times 100K is 30M ms = 30K s, or some eight hours. Certainly a good long while to wait, but still a very far cry from even one year. To get to a year at that performance, I'd expect an iteration count on the order of 100M, not 100K, to be needed. (8 hours is about 1/1100 of one year.) -- Michael Kjörling • https://michael.kjorling.se • [email protected] “Remember when, on the Internet, nobody cared that you were a dog?”