On Sun, May 27, 2018 at 01:22:05PM +0200, Rafael J. Wysocki wrote: > Again, the PBKDF2 user would be hibernation. It could either take a key from > user space, which would require a key-generating user-space component to be > present in the initramfs (I guess no issue for a regular distro, but I can > imagine cases when it may be a difficulty), or take a passphrase from user > space and generate a key by itself (that's what we would like to use PBKDF2 > for). Right, but are you going to get the passphrase from user space? You have to prompt from user space anyway, so running PBPDF2 from userspace isn't that big of deal. Feel free to grab the implementation from e2fsprogs; it's not hard. :-) - Ted
