Re: luks2

[Patrick Steinhardt]

On Thu, Aug 06, 2020 at 04:37:16PM -0500, Glenn Washburn wrote:
> On Thu, 6 Aug 2020 14:40:33 +0200
> Mistave <mistave@countermail.com> wrote:
> 
> > > There has been no official release with LUKS2 support yet (though
> > > one is coming very soon).  The development repo does have LUKS2
> > > support, currently with some bugs that preclude using non-standard
> > > (512 byte) sector sizes and some other issues.
> > 
> > Hello, does this development version include Argon2 support?
> 
> Not yet.  Patrick has posted patches to the dev mailinglist if you'd
> like to try them.  It looks like there is a potential legal issue with
> including the patches and even if not there need to be some
> improvements before they are included. You can search the grub-devel
> mailinglist titled "[PATCH v3 0/5] Support Argon2 KDF in LUKS2".  I
> have not tried them yet to verify if they work.
> 
> Cheers,
> Glenn

Thanks for the reminder about the legal issues, I totally forgot about
reaching out to the authors.

The patches do work for me, but only if you're lucky enough to be on a
platform where it's fine to allocate a gigabyte of RAM (which is the
default memory-hardness for Argon2i). Unfortunately EFI isn't one of
them, which is why I've been working towards improving the memory
management subsystem to cope with such huge requests. So be warned if
you're trying out those patches, as decryption will quite likely fail
with an out-of-memory warning.

Patrick

signature.asc
Description: PGP signature