zkey cryptsetup should automatically downgrade password derivation on low memory systems

ibm-s390-linux / s390-tools

Tools for use with the s390 Linux kernel and device drivers

MIT License

63 stars 60 forks source link

zkey cryptsetup should automatically downgrade password derivation on low memory systems #56

Closed xnox closed 5 years ago

xnox commented 5 years ago

As mentioned in the https://www.ibm.com/support/knowledgecenter/linuxonibm/com.ibm.linux.z.lxdc/lxdc_debug.html#lxdc_debug_modules__lxdc_crypt_problem

On systems with less than 1GB of RAM, the zkey cryptsetup command should automatically generate --pbkdf pbkdf2 possibly with a warning. As on large enough systems, we should be using the cryptsetup compiled defaults / strong key derivation function.

xnox commented 5 years ago

Ah, this is fixed in https://github.com/ibm-s390-tools/s390-tools/commit/a69470d7e02af2d7d6a4c781eef57727c0672fc0 in v2.8.0