2 ms·
I'm reminded of LUKS Argon2 implementation, which is much slower than userspace. Therefore a sufficiently difficult challenge that may take less than a second i
by radlad 2mo ago
I'm reminded of LUKS Argon2 implementation, which is much slower than userspace. Therefore a sufficiently difficult challenge that may take less than a second in userspace Linux can take 20 or more seconds at boot.
- jwilk 2mo agoHuh? Are you saying there's an Argon2 implementation in the kernel?
- minimaltom 2mo agoIts not in the kernel but in the userspace tool that goes from password to key (the key is handed to the kernel). You can see the implementation here: https://gitlab.com/cryptsetup/cryptsetup/-/blob/main/lib/crypto_backend/argon2_generic.c https://gitlab.com/cryptsetup/cryptsetup/-/blob/main/lib/cry...
- radlad 2mo agoI got this wrong yesterday. While LUKS2 and GRUB now support Argon2, I configured LUKS1, which uses PBKDF2-SHA512. In any case, it is GRUB which behaves slowly during boot. While I haven't tested Argon2, I believe it is affected in the same way as PBKDF2.