Can I specify PBKDF2 rounds to use with LUKS/dm-crypt?

Posted by Naftuli Tzvi Kay on Super User See other posts from Super User or by Naftuli Tzvi Kay
Published on 2014-06-09T18:11:20Z Indexed on 2014/06/09 21:29 UTC
Read the original article Hit count: 284

Filed under:

linux

|

luks

I have encrypted my root partition with dm-crypt/LUKS/cryptsetup on Ubuntu 12.04.

Since it uses PBKDF2:

Is it possible, during creation of the encrypted disk, to specify a custom amount of PBKDF2 iterations for key derivation?
Is it possible, after the encrypted disk has already been created, to modify the amount of PBKDF2 iterations for key derivation?

I'd like to make it a little harder to brute-force :)

© Super User or respective owner

Related posts about linux

apt-get install and update fail

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I've got a problem with apt-get update and apt-get install ... commands . every time update or installing fails and errors are : Get:1 http://dl.google.com stable Release.gpg [198B] Ign http://dl.google.com/linux/chrome/deb/ stable/main Translation-en_US Get:2 http://dl… >>> More
kernel module compiling error

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
sh@ubuntu:/home/ccpp/helloworld$ make gcc-4.6 -O2 -DMODULE -D_KERNEL_ -W -Wall -Wstrict-prototypes -Wmissing-prototypes -isystem /lib/modules/`uname -r`/build/include -c -o hello-1.o hello-1.c hello-1.c:4:0: warning: "MODULE" redefined [enabled by default] <command-line>:0:0: note: this is… >>> More
Build-Essentials installation failing

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I am having trouble accessing the several critical header files that show to be a part of the build process. The "Ubuntu Software Center" shows "Build Essentials" as installed: Next I did the following two commands, which did not improve the problem: ~$ sudo apt-get install build-essential [sudo]… >>> More
Updating Debian kernel

as seen on Super User - Search for 'Super User'
I'm trying to update my Debian machine to 2.6.32-46 (which is the new stable). However, after doing apt-get update my apt-cache search linux-image shows me: linux-headers-2.6.32-5-486 - Header files for Linux 2.6.32-5-486 linux-headers-2.6.32-5-686-bigmem - Header files for Linux 2.6.32-5-686-bigmem linux-headers-2… >>> More
Serial connection over a single USB cable (Windows to linux, or linux to linux)

as seen on Server Fault - Search for 'Server Fault'
I'm helping out with a project for an embedded device that only has USB and no serial. This device is running Linux. These days, when we need to connect to a serial port on a device we typically use a USB to serial adapter (on something like a phone system or a load balancing device, etc). I would… >>> More

Related posts about luks

Encrypting a non-linux partition with LUKS.

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I have a non-Linux partition I want to encrypt with LUKS. The goal is to be able to store it by itself on a device without Linux and access it from the device when needed with an Ubuntu Live CD. I know LUKS can't encrypt partitions in place, so I created another, unformatted partition of the EXACT… >>> More
LUKS no longer accepts my my passphrase

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I created a 4 drive RAID5 setup using mdadm and upgrading from 2TB drives to the new Hitachi 7200RPM 4TB drives. I can initially open my luks partition, but later can no longer access it. I can no longer access my LUKS partition even tho I have the right passphrases. It was working and then at an… >>> More
Kubuntu 9.10: LUKS-encrypt entire partition

as seen on Super User - Search for 'Super User'
Hi, In older versions of Ubuntu, mainly 8.04, I could encrypt en entire partition using LUKS, and mount it as /. the /boot directory was mounted on another partition. At boot time, I had to enter my password to enable any access to anything other than /boot. In Kubuntu 9.10, I only have the option… >>> More
Does LUKS encryption affect TRIM? (SSD and linux)

as seen on Super User - Search for 'Super User'
I'm moving over to Linux when the new SSD arrives. SSD gives increased performance, so I thought that I could encrypt everything. But then I came to think about TRIM, and garbage collection on the drive. Will a LUKS encrypted drive affect the garbage collection system? (TRIM). >>> More
Does luks ecryption effect TRIM? (SSD and linux)

as seen on Super User - Search for 'Super User'
I'm moving over to linux when the new SSD arrives. SSD gives increased performance, so I thought that I could encrypt everything. But then I came to think about TRIM, and garbage collection on the drive. Will luks encrypted drive effect the garbage collection system? (trim). >>> More