Re: cryptsetup LUKS: Too low iteration count: only 14
Milan Broz <[email protected]>
| Newsgroups | dev.linux.lists.cryptsetup |
|---|---|
| Message-ID | <[email protected]> |
On 13/08/2022 21:35, Michael Kjörling wrote: > On 13 Aug 2022 18:11 +0200, from [email protected] (Milan Broz): >>> that the iteration count was 14 in my case. >>> The iteration time that I chose (arbitrarily) is 4123ms >> >> If you set 100k iteration with 1G memory cost for Argon2, you will get >> unlocking time that is perhaps in years... :-) > > Out of curiosity, how did you arrive at the "years" order of > magnitude? Is there an exponential component involved somewhere when > increasing the iteration count? Ah, my bad, sorry. It was more a rhetoric note (I meant: it will take very long time.) It expects that the memory cost is the same, though. Once you will increase memory, it influences iteration time too. Cryptsetup KDF benchmark tries to increase memory, then iterations, but here it hits the 1G limit already. Sorry for the confusion, I should be more exact :) Milan