]> git.ipfire.org Git - thirdparty/systemd.git/commitdiff
user-record: switch the default LUKS PBKDF to argon2id to match cryptsetup
authornl6720 <nl6720@gmail.com>
Fri, 24 Sep 2021 10:22:18 +0000 (13:22 +0300)
committerLuca Boccassi <luca.boccassi@gmail.com>
Fri, 24 Sep 2021 20:02:21 +0000 (21:02 +0100)
cryptsetup 2.4.0 changed the default LUKS2 PBKDF to argon2id.
See https://gitlab.com/cryptsetup/cryptsetup/-/commit/db775417909db0f0b07168d07fdf8813e3ca94fe.

src/shared/user-record.c

index 9bd6a038875c9cefbe5016b95afcae99634cd832..4c54303d131a265c0a49f0f92c592607c6e60e28 100644 (file)
@@ -1893,7 +1893,7 @@ uint64_t user_record_luks_volume_key_size(UserRecord *h) {
 const char* user_record_luks_pbkdf_type(UserRecord *h) {
         assert(h);
 
-        return h->luks_pbkdf_type ?: "argon2i";
+        return h->luks_pbkdf_type ?: "argon2id";
 }
 
 uint64_t user_record_luks_pbkdf_time_cost_usec(UserRecord *h) {