3 ms·

Actually LUKS uses 1 second of iterations, last time I checked, and according to the code: https://gitlab.com/cryptsetup/cryptsetup/blob/master/lib/libcryptsetu

• loeg 7y ago
  Nope. That's a comment on a tangentially related function declaration; it happens to be inaccurate. Here is where the default is actually specified (2000 ms): https://gitlab.com/cryptsetup/cryptsetup/blob/master/configure.ac#L579 https://gitlab.com/cryptsetup/cryptsetup/blob/master/configu... CS_NUM_WITH([luks1-iter-time], [PBKDF2 iteration time for LUKS1 (in ms)], [2000]) See also https://gitlab.com/cryptsetup/cryptsetup/blob/master/lib/utils_pbkdf.c#L27 https://gitlab.com/cryptsetup/cryptsetup/blob/master/lib/uti... . const struct crypt_pbkdf_type default_pbkdf2 = { .type = CRYPT_KDF_PBKDF2, .hash = DEFAULT_LUKS1_HASH, .time_ms = DEFAULT_LUKS1_ITER_TIME };