Re: Question on LUKS master key digest and its effect on security

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Tero Pesonen wrote:
> Since there have been no comments on this, I was wondering if I should 
> rather send questions of this sort on scri.crypt or some such place 
> where these kind of topics are discussed? If so, is the iteration count 
> 10 for the PBKDF2 correct? (So that I am able to formulate my question 
> right and not pass on wrong information.)

Yes, 10 is currently hardcoded:

// Numbers of iterations for the master key digest
#define LUKS_MKD_ITER 10

If you need Clemens' formal LUKS specification it is here
http://cryptsetup.googlecode.com/svn-history/r42/wiki/LUKS-standard/on-disk-format.pdf

Please cc me if you receive analysis in reply, thanks.

(And btw independent code review to find possible implementation mistakes is
always welcomed too, mainly now after reimplementation PBKDF2 and AF to use
gcrypt and allowing other hash algorithms:-)

Milan
--
mbroz@xxxxxxxxxx


_______________________________________________
dm-crypt mailing list
dm-crypt@xxxxxxxx
http://www.saout.de/mailman/listinfo/dm-crypt

[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux