FS#38538 - [cryptsetup] Disable gcrypt-based key derivation

Attached to Project: Arch Linux
Opened by Veeti Paananen (veeti) - Thursday, 16 January 2014, 12:41 GMT
Last edited by Andreas Radke (AndyRTR) - Sunday, 19 January 2014, 08:58 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To No-one
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

The PBKDF2 function in gcrypt2 1.6.0 has a *major* speed regression from earlier releases. This makes the use of large keyfiles with LUKS extremely slow (for example, booting can take several minutes). The patch at http://code.google.com/p/cryptsetup/source/detail?r=aa7346bb3639529a69c9a151a6e0bf3f2c7054aa should be applied and gcrypt-based PBKDF2 should be disabled in cryptsetup for the time being.

See http://code.google.com/p/cryptsetup/issues/detail?id=199
This task depends upon

Closed by  Andreas Radke (AndyRTR)
Sunday, 19 January 2014, 08:58 GMT
Reason for closing:  Fixed
Comment by Andreas Radke (AndyRTR) - Friday, 17 January 2014, 09:18 GMT
Should be fixed with libgcrypt 1.6.0-2.
Comment by Olivier Brunel (jjacky) - Sunday, 19 January 2014, 00:27 GMT
For the record, it is.

Loading...