bugGNU GRUB - Bugs: bug #59408, cryptomount: very slow PBKDF2...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #59408: cryptomount: very slow PBKDF2 master key decryption

Submitted by:  Dmitry <reagentoo>
Submitted on:  Tue 03 Nov 2020 04:05:32 PM UTC  
 
Category:  Disk & Partition Severity:  Major
Priority:  5 - Normal Item Group:  None
Status:  None Privacy:  Public
Assigned to:  None Originator Name:  Dmitry
Open/Closed:  Open Release: 
Release:  Git master Reproducibility:  None
Planned Release:  None

Wed 25 Nov 2020 11:51:35 PM UTC, comment #1: 

The wait time doesn't just depend on key length. It also depends on the number of pbkdf iterations. Reduce the key size and the number of pbkdf iterations.

no name <crockety>
Tue 03 Nov 2020 04:05:32 PM UTC, original submission:  

Currently the Grub's cryptomount is not usable for long keys.
The waiting time for decryption increases greatly when using keys from 1 kilobyte and above.

grub_crypto_pbkdf2 function is the entry point into long wait:
https://git.savannah.gnu.org/cgit/grub.git/tree/grub-core/disk/luks2.c?id=d7cac52eb21b866ffec66dc8d1319cc0695c94ee#n453

Related links:
https://lists.gnu.org/archive/html/grub-devel/2016-10/msg00018.html
https://lists.gnu.org/archive/html/grub-devel/2018-01/msg00026.html

Dmitry <reagentoo>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by stefanbruens
  • -email is unavailable- added by crockety (Posted a comment)
  • -email is unavailable- added by reagentoo (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

     

     

    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2021-09-19 stefanbruens Carbon-Copy- => Added stefanbruens

    Back to the top


    Powered by Savane 3.6