mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
51b9504720
cryptsetup 2.1.0 requires excessive amount of RAM (1GB) to luksOpen encrypted drives (LP: #1820049). LUKS2 introduced support for Argon2i and Argon2id as a Password-Based Key Derivation Function (PBKDF). Argon2 is the winner of Password Hashing Competition and is now officially recommended by RFC 9106. PBKDF2 is currently used in zkey to mitigate out-of-memory errors when multiple LUKS2 volumes are opened automatically via /etc/crypttab. This patch is to use Argon2i (the deflaut algorithm) as key derivation function for LUKS2 volumes, but with options for low memory and time requirements. Using the default Argon2i options might still cause out-of-memory errors. Link: https://bugs.launchpad.net/ubuntu/+source/cryptsetup/+bug/1820049 Closes: https://github.com/ibm-s390-linux/s390-tools/pull/138 Signed-off-by: Frank Heimes <frank.heimes@canonical.com> Acked-by: Ingo Franzki ifranzki@linux.ibm.com [hoeppner@linux.ibm.com: fix whitespace, line break, and commit message] Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>