Re: [dm-crypt] different default key sizes for CREATE and LUKSFORMAT

[Stefan Xenon <stefanxe@gmx.net>]

> Good idea, I like it. However use the same time as for the keyslots.
> There is really no reason to have one use less iterations than
> the other. 
> 
> The two iterations are linked security-wise, so treating them the same
> makes sense.
> 
> Incidentially, it should only add the time once, there is only
> one Master Key. 

Sounds good for me as well. While I don't know the details I am
wondering if the result may be influenced by other processes executed at
the same time. This means, when heavy processes are running in the
background (e.g. compilation), the iteration calculation may become
slower and thus the amount of iterations smaller as it would be
normally. Please note that I don't know the implementation details but
just want to point out this theoretical problem.

Also the possibility to recalculate the iterations might be useful,
after an upgrade of the computer (but with remaining storage device).
Especially external hard drives might be in use for more years compared
to the CPU.

Stefan