bugGNU GRUB - Bugs: bug #59408, cryptomount: very slow PBKDF2...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #59408: cryptomount: very slow PBKDF2 master key decryption

Submitter:  Dmitry <reagentoo>
Submitted:  Tue 03 Nov 2020 04:05:32 PM UTC
   
 
Category:  Disk & Partition Severity:  Major
Priority:  5 - Normal Item Group:  None
Status:  None Privacy:  Public
Assigned to:  None Originator Name:  Dmitry
Open/Closed:  Open Release:  Git master
Release:  Reproducibility:  None
Planned Release:  None

Wed 25 Nov 2020 11:51:35 PM UTC, comment #1: 

The wait time doesn't just depend on key length. It also depends on the number of pbkdf iterations. Reduce the key size and the number of pbkdf iterations.

- <_87803>
Tue 03 Nov 2020 04:05:32 PM UTC, original submission:  

Currently the Grub's cryptomount is not usable for long keys.
The waiting time for decryption increases greatly when using keys from 1 kilobyte and above.

grub_crypto_pbkdf2 function is the entry point into long wait:
https://git.savannah.gnu.org/cgit/grub.git/tree/grub-core/disk/luks2.c?id=d7cac52eb21b866ffec66dc8d1319cc0695c94ee#n453

Related links:
https://lists.gnu.org/archive/html/grub-devel/2016-10/msg00018.html
https://lists.gnu.org/archive/html/grub-devel/2018-01/msg00026.html

Dmitry <reagentoo>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by stefanbruens
  • -email is unavailable- added by _87803 (Posted a comment)
  • -email is unavailable- added by reagentoo (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2021-09-19 stefanbruens Carbon-Copy- Added stefanbruens

    Back to the top

    Powered by Savane 3.13-4448.
    Corresponding source code