From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <SRS0=BhpI=OY=saout.de=dm-crypt-bounces@kernel.org>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	aws-us-west-2-korg-lkml-1.web.codeaurora.org
Received: from mail.kernel.org (mail.kernel.org [198.145.29.99])
	by smtp.lore.kernel.org (Postfix) with ESMTP id 98733C433F5
	for <dm-crypt@archiver.kernel.org>; Mon,  4 Oct 2021 00:31:09 +0000 (UTC)
Received: from mail.server123.net (mail.server123.net [78.46.64.186])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by mail.kernel.org (Postfix) with ESMTPS id 2D5A361354
	for <dm-crypt@archiver.kernel.org>; Mon,  4 Oct 2021 00:31:08 +0000 (UTC)
DMARC-Filter: OpenDMARC Filter v1.4.1 mail.kernel.org 2D5A361354
Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=wagner.name
Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=saout.de
X-Virus-Scanned: amavisd-new at saout.de
Received-SPF: None (mailfrom) identity=mailfrom; client-ip=84.19.178.47; helo=v1.tansi.org; envelope-from=arno@wagner.name; receiver=<UNKNOWN> 
Received: from v1.tansi.org (mail.tansi.org [84.19.178.47])
	by mail.server123.net (Postfix) with ESMTP
	for <dm-crypt@saout.de>; Mon,  4 Oct 2021 02:28:19 +0200 (CEST)
Received: from gatewagner.dyndns.org (81-6-44-245.init7.net [81.6.44.245])
	by v1.tansi.org (Postfix) with ESMTPA id EB98E1401D1;
	Mon,  4 Oct 2021 02:28:16 +0200 (CEST)
Received: by gatewagner.dyndns.org (Postfix, from userid 1000)
	id BDC3B17A245; Mon,  4 Oct 2021 02:28:18 +0200 (CEST)
Date: Mon, 4 Oct 2021 02:28:18 +0200
From: Arno Wagner <arno@wagner.name>
To: Dmitry Dmitry <dimanne@gmail.com>
Message-ID: <20211004002818.GC25408@tansi.org>
Mail-Followup-To: Dmitry Dmitry <dimanne@gmail.com>, dm-crypt@saout.de
References: <CAC9D8R6jHQr_fKco1PjGvcJg8rLxHFrPNGxBiNzncj5sONJcWg@mail.gmail.com>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <CAC9D8R6jHQr_fKco1PjGvcJg8rLxHFrPNGxBiNzncj5sONJcWg@mail.gmail.com>
User-Agent: Mutt/1.10.1 (2018-07-13)
Message-ID-Hash: TE2FO5VJIJDDNHKWSVIFANBAKJTE7UI6
X-Message-ID-Hash: TE2FO5VJIJDDNHKWSVIFANBAKJTE7UI6
X-MailFrom: arno@wagner.name
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dm-crypt.saout.de-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; suspicious-header
CC: dm-crypt@saout.de
X-Mailman-Version: 3.3.2
Precedence: list
Subject: [dm-crypt] Re: Argon2 limits choice
List-Id: <dm-crypt.saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Post: <mailto:dm-crypt@saout.de>
List-Subscribe: <mailto:dm-crypt-join@saout.de>
List-Unsubscribe: <mailto:dm-crypt-leave@saout.de>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hi,

I do not think these limits are "conservative".
You gain very little by raising them. Better just 
use a good passphrase.

Regards,
Arno

On Mon, Oct 04, 2021 at 00:30:13 CEST, Dmitry Dmitry wrote:
>    Hi,
>    I am wondering if there are objective reasons for such conservative
>    **upper** **hard** limits for Argon?
>    } else if (!strcmp(kdf, "argon2i") || !strcmp(kdf, "argon2id")) {
>       limits->max_iterations = UINT32_MAX;
>       limits->max_memory     = 4*1024*1024; /* 4GiB */
>       limits->max_parallel   = 4;
>    }
>    (well, apart from UINT32_MAX, which makes sense, kind of)
>    Just to reiterate, I am not talking about minimum values, or default
>    values. The question is about upper limits.
>    P.S.
>    I was personally thinking about using ~32 threads and ~128GiB of RAM as
>    KDF parameters...
>    --
>    Dmitry
>    Sent from my gmail
>    GPG/PGP Key fingerprint = 1670 0E8A 4AEC 179D 326F  BECE 8B33 360D 8717
>    9711

> _______________________________________________
> dm-crypt mailing list -- dm-crypt@saout.de
> To unsubscribe send an email to dm-crypt-leave@saout.de


-- 
Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: arno@wagner.name
GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D 9718
----
A good decision is based on knowledge and not on numbers. -- Plato

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier
_______________________________________________
dm-crypt mailing list -- dm-crypt@saout.de
To unsubscribe send an email to dm-crypt-leave@saout.de