crypto: increase default pbkdf2 time for luks to 2 seconds
commit2ab66cd577d6d0ec3c44b14cc823e76ea5a4397c
authorDaniel P. Berrange <berrange@redhat.com>
Wed, 7 Sep 2016 11:48:32 +0000 (7 12:48 +0100)
committerDaniel P. Berrange <berrange@redhat.com>
Mon, 19 Sep 2016 15:30:45 +0000 (19 16:30 +0100)
tree83ba90f474b0dbb90706b0234b7ea442f1a46c0a
parentacd0dfd0c252a06ec6f2146fea01b66b7bc68cfc
crypto: increase default pbkdf2 time for luks to 2 seconds

cryptsetup recently increased the default pbkdf2 time to 2 seconds
to partially mitigate improvements in hardware performance wrt
brute-forcing the pbkdf algorithm. This updates QEMU defaults to
match.

Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
crypto/block-luks.c
qapi/crypto.json