Re: Idea behind EXT4_IOC_GET_ENCRYPTION_PWSALT?

[Richard Weinberger]

Joe,

On 30.11.2016 01:44, Joe Richey wrote:
> Richard,
> 
> Our current design for fscrypt (tentative name for the userspace
> filesystem encryption manager) does not use the global filesystem salt
> (EXT4_IOC_GET_ENCRYPTION_PWSALT), we are planning on having a
> different salt for each password used in the system. We are using
> planning on using Argon2id as the password stretching algorithm, so
> we'll have costs for memory, time, and parallelism stored for each
> password as well as a salt.


Makes sense.
So, for now I'll not implement this ioctl command in UBIFS.

Thanks,
//richard