Follow-up Comment #12, bug #55093 (project grub):
[comment #11 comment #11:]
> comment #10
> > It seems that LUKS2 support has been implemented
> No it is not. Current version is limited to support LUKS2 with PBKDF2 (see
grub-core/disk/luks2.c 461)
> > case LUKS2_KDF_TYPE_ARGON2I:
> > ret = grub_error (GRUB_ERR_BAD_ARGUMENT, "Argon2 not supported");
>
> > My suggestion is to close this bug and open a new one to address the new
bugs
> Why create an additional page if the errors in this one are still not fully
resolved?
Argon2ID is the default for LUKS2. It supports pbkdf2 for backwards
compatibility, but that's it. It's pretty widely asserted that GRUB2 either
does not, or has *very limited* support for LUKS2. Without Argon2ID support,
GRUB2 will can't be considered to have proper LUKS2 support. That's like
saying that you serve sodas, but don't have the ability to serve it
carbonated. That's just syrup and water.
Friendly jokes aside, this shouldn't be closed until LUKS2 support is
completed.
As Medoo pointed out, there are patches out that have taken upon themselves to
introduce proper support, including the AUR package they referenced
(grub-improved-luks2-git). It may not be difficult to port these in.
_______________________________________________________
Reply to this item at:
<https://savannah.gnu.org/bugs/?55093>
_______________________________________________
Message sent via Savannah
https://savannah.gnu.org/
