From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <htd@fancy-poultry.org>
Received: from moutng.kundenserver.de (moutng.kundenserver.de
	[212.227.126.187]) by mail.saout.de (Postfix) with ESMTP
	for <dm-crypt@saout.de>; Fri, 20 Nov 2009 16:43:12 +0100 (CET)
Date: Fri, 20 Nov 2009 16:43:11 +0100
From: Heinz Diehl <htd@fancy-poultry.org>
Message-ID: <20091120154311.GA9101@fancy-poultry.org>
References: <20091118054555.GB28949@tansi.org> <4B03C5EE.7010702@gmx.net>
	<20091118102515.GB30910@tansi.org> <4B03D865.8070905@redhat.com>
	<4B03F5F2.9080609@redhat.com> <20091119074104.GC8694@tansi.org>
	<20091119092107.GA7875@fancy-poultry.org>
	<20091119122445.GA10856@tansi.org>
	<20091119130028.GA9415@fancy-poultry.org>
	<4B068840.6070508@redhat.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <4B068840.6070508@redhat.com>
Subject: Re: [dm-crypt] different default key sizes for CREATE and LUKSFORMAT
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
	<mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
	<mailto:dm-crypt-request@saout.de?subject=subscribe>
To: dm-crypt@saout.de

On 20.11.2009, Milan Broz wrote: 

> What about derive the MK digest iteration count from calculated keyslot
> iteration time (I suggest 1/5 of calculated time) - so for default 1 second
> it is cca 200ms - not accurate, because benchmark uses different message on input)
> but with minimum 1000 iterations?

Sounds fine to me (and is a good and practical idea, too).

Thanks,
Heinz.