Messages in this thread | | | Subject | Re: Idea behind EXT4_IOC_GET_ENCRYPTION_PWSALT? | From | Richard Weinberger <> | Date | Wed, 30 Nov 2016 09:29:40 +0100 |
| |
Joe,
On 30.11.2016 01:44, Joe Richey wrote: > Richard, > > Our current design for fscrypt (tentative name for the userspace > filesystem encryption manager) does not use the global filesystem salt > (EXT4_IOC_GET_ENCRYPTION_PWSALT), we are planning on having a > different salt for each password used in the system. We are using > planning on using Argon2id as the password stretching algorithm, so > we'll have costs for memory, time, and parallelism stored for each > password as well as a salt.
Makes sense. So, for now I'll not implement this ioctl command in UBIFS.
Thanks, //richard
| |