[pkg-cryptsetup-devel] Bug#923513: Bug#923513: cryptsetup-bin: Can no longer luksFormat as non-root: "Not compatible PBKDF options."

[Christoph Biedl]

Guilhem Moulin wrote...

> FWIW the regression isn't directly tied to the new default LUKS format,
> but to the PBKDF benchmark for Argon2i/id (the default PBKDF for LUKS2).
> Here is an output snippet obtained with --debug:
(...)
> Anyway, IMHO in test scenari it makes sense to the PBKDF benchmark and
> instead force parameters directly (via --pbkdf-force-iterations and
> --pbkdf-memory) to speed up luksFormat and luksOpen.

Thanks for looking into this and the insights given. For luksmeta
however ... it's "to access metadata in a LUKSv1 header", and before the
buster release I better shall refrain from checking how the related
tools like clevis deal with LUKSv2 headers  B-)

    Christoph

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-cryptsetup-devel/attachments/20190302/43723992/attachment.sig>