3 ms·
It uses an iterated SHA256 function with 1024000 iterations for key-derivation (EVP_BytesToKey, OpenSSL 0.9.x didn't have anything better available). On my mach
by edwintorok 13y ago
It uses an iterated SHA256 function with 1024000 iterations
for key-derivation (EVP_BytesToKey, OpenSSL 0.9.x didn't have anything better available).
On my machine (AMD FX-8350 @4Ghz) it takes 0.7s to calculate the key from a password.
The key's fingerprint is then stored in the volume's metadata (unless paranoid mode is on), the fingerprint is an iterated hash, with a random salt.
- notacoward 13y agoThat's sure not what it looked like when I read the code. So what is "skysalt" (the constant with the value mentioned above) used for?
- edwintorok 13y agoThe one with the random salt is keyfp(), the fixed one is getpassword(). See https://twitter.com/solardiz/status/462442039687512065 https://twitter.com/solardiz/status/462442039687512065