Closed xnox closed 5 years ago
As mentioned in the https://www.ibm.com/support/knowledgecenter/linuxonibm/com.ibm.linux.z.lxdc/lxdc_debug.html#lxdc_debug_modules__lxdc_crypt_problem
On systems with less than 1GB of RAM, the zkey cryptsetup command should automatically generate --pbkdf pbkdf2 possibly with a warning. As on large enough systems, we should be using the cryptsetup compiled defaults / strong key derivation function.
zkey cryptsetup
--pbkdf pbkdf2
Ah, this is fixed in https://github.com/ibm-s390-tools/s390-tools/commit/a69470d7e02af2d7d6a4c781eef57727c0672fc0 in v2.8.0
As mentioned in the https://www.ibm.com/support/knowledgecenter/linuxonibm/com.ibm.linux.z.lxdc/lxdc_debug.html#lxdc_debug_modules__lxdc_crypt_problem
On systems with less than 1GB of RAM, the
zkey cryptsetup
command should automatically generate--pbkdf pbkdf2
possibly with a warning. As on large enough systems, we should be using the cryptsetup compiled defaults / strong key derivation function.