[bug #59408] cryptomount: very slow PBKDF2 master key decryption

[Dmitry]

URL:
  <https://savannah.gnu.org/bugs/?59408>

                 Summary: cryptomount: very slow PBKDF2 master key decryption
                 Project: GNU GRUB
            Submitted by: reagentoo
            Submitted on: Вт 03 ноя 2020 16:05:32
                Category: Disk &amp; Partition
                Severity: Major
                Priority: 5 - Normal
              Item Group: None
                  Status: None
                 Privacy: Public
             Assigned to: None
         Originator Name: Dmitry
        Originator Email: reagentoo@gmail.com
             Open/Closed: Open
                 Release: 
                 Release: Git master
         Discussion Lock: Any
         Reproducibility: None
         Planned Release: None

    _______________________________________________________

Details:

Currently the Grub's cryptomount is not usable for long keys.
The waiting time for decryption increases greatly when using keys from 1
kilobyte and above.

grub_crypto_pbkdf2 function is the entry point into long wait:
https://git.savannah.gnu.org/cgit/grub.git/tree/grub-core/disk/luks2.c?id=d7cac52eb21b866ffec66dc8d1319cc0695c94ee#n453

Related links:
https://lists.gnu.org/archive/html/grub-devel/2016-10/msg00018.html
https://lists.gnu.org/archive/html/grub-devel/2018-01/msg00026.html




    _______________________________________________________

Reply to this item at:

  <https://savannah.gnu.org/bugs/?59408>

_______________________________________________
  Сообщение отправлено по Savannah
  https://savannah.gnu.org/