[pkg-cryptsetup-devel] Bug#908917: cryptsetup: argon2id as default PBKDF setting for new installs - Buster+

[Milan Broz]

On 16/09/18 00:08, procmem wrote:
> The recommended config paramters by Milan Broz:
> 
>   # cryptsetup luksConvertKey --key-slot 1 --pbkdf argon2id
> --pbkdf-force-iterations 50 --pbkdf-memory 1048576 --pbkdf-parallel 4
> <device>

NO!

This was an example, as you asked how to setup keyslot parameters.

Seems you do not understand what we said to you.

Forced iteration should not be used, ditto for forced threads, it must be benchmarked.

Debian maintainers: please ignore this, it is nonsense.

Thanks.