3 ms·

I noticed that they are using cperciva's scrypt() for key strengthening: http://www.tarsnap.com/scrypt.html http://www.tarsnap.com/scrypt.html They opted to g

I noticed that they are using cperciva's scrypt() for key strengthening: http://www.tarsnap.com/scrypt.html http://www.tarsnap.com/scrypt.html They opted to go with a memory bound approach rather than a CPU bound approach so that login time doesn't adversely affect UX.

tedunangst 16y ago
Yes, the "Managing encryption keys" section was the most interesting part. I was wondering how they were going to protect the disk encryption key. I'm not positive that a pure memory based key strengthening is all the useful though. Depends on how much time they think is too much to login, but considering the class of machine, I'd be worried if they aimed lower than one second.