bugGNU GRUB - Bugs: bug #59408, cryptomount: very slow PBKDF2...


You are not allowed to post comments on this tracker with your current authentication level.

bug #59408: cryptomount: very slow PBKDF2 master key decryption

Submitted by:  Dmitry <reagentoo>
Submitted on:  Tue 03 Nov 2020 04:05:32 PM UTC  
Category:  Disk & Partition Severity:  Major
Priority:  5 - Normal Item Group:  None
Status:  None Privacy:  Public
Assigned to:  None Originator Name:  Dmitry
Open/Closed:  Open Release: 
Release:  Git master Reproducibility:  None
Planned Release:  None

Wed 25 Nov 2020 11:51:35 PM UTC, comment #1: 

The wait time doesn't just depend on key length. It also depends on the number of pbkdf iterations. Reduce the key size and the number of pbkdf iterations.

no name <crockety>
Tue 03 Nov 2020 04:05:32 PM UTC, original submission:  

Currently the Grub's cryptomount is not usable for long keys.
The waiting time for decryption increases greatly when using keys from 1 kilobyte and above.

grub_crypto_pbkdf2 function is the entry point into long wait:

Related links:

Dmitry <reagentoo>


No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by stefanbruens
  • -email is unavailable- added by crockety (Posted a comment)
  • -email is unavailable- added by reagentoo (Submitted the item)

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.




    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2021-09-19 stefanbruens Carbon-Copy- => Added stefanbruens

    Back to the top

    Powered by Savane 3.7