Re: [PATCH 06/11] crypto: check that LUKS PBKDF2 iterations count is non-zero

2022-10-27 Thread Daniel P . Berrangé
On Tue, Sep 06, 2022 at 10:26:35AM +0100, Richard W.M. Jones wrote: > On Tue, Sep 06, 2022 at 09:41:42AM +0100, Daniel P. Berrangé wrote: > > Both the master key and key slot passphrases are run through the PBKDF2 > > algorithm. The iterations count is expected to be generally very large > > (many

Re: [PATCH 06/11] crypto: check that LUKS PBKDF2 iterations count is non-zero

2022-09-06 Thread Richard W.M. Jones
On Tue, Sep 06, 2022 at 09:41:42AM +0100, Daniel P. Berrangé wrote: > Both the master key and key slot passphrases are run through the PBKDF2 > algorithm. The iterations count is expected to be generally very large > (many 10's or 100's of 1000s). It is hard to define a low level cutoff, > but we

[PATCH 06/11] crypto: check that LUKS PBKDF2 iterations count is non-zero

2022-09-06 Thread Daniel P . Berrangé
Both the master key and key slot passphrases are run through the PBKDF2 algorithm. The iterations count is expected to be generally very large (many 10's or 100's of 1000s). It is hard to define a low level cutoff, but we can certainly say that iterations count should be non-zero. A zero count