From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gmazyland@gmail.com>
Received: from mail-lb0-x242.google.com (mail-lb0-x242.google.com
 [IPv6:2a00:1450:4010:c04::242])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (No client certificate requested)
 by mail.server123.net (Postfix) with ESMTPS
 for <dm-crypt@saout.de>; Tue, 21 Jun 2016 05:24:41 +0200 (CEST)
Received: by mail-lb0-x242.google.com with SMTP id td3so295947lbb.2
 for <dm-crypt@saout.de>; Mon, 20 Jun 2016 20:24:41 -0700 (PDT)
References: <CANJQ5C5b6kEZ1JYwbjc9tAkWiZ6Y0cJ0Je9kR-TkA7nBQg6ZjA@mail.gmail.com>
From: Milan Broz <gmazyland@gmail.com>
Message-ID: <b3ccfeaf-d151-7a01-3e5d-95adf404d9c5@gmail.com>
Date: Tue, 21 Jun 2016 05:24:38 +0200
MIME-Version: 1.0
In-Reply-To: <CANJQ5C5b6kEZ1JYwbjc9tAkWiZ6Y0cJ0Je9kR-TkA7nBQg6ZjA@mail.gmail.com>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Subject: Re: [dm-crypt] luksAddKey hangs for ~85 minutes and then fails
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt/>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: Joe Hillenbrand <joehillen@gmail.com>, dm-crypt@saout.de


On 06/21/2016 12:15 AM, Joe Hillenbrand wrote:
> I've been trying and trying to add a new key to one of my devices so
> that I can automount,
> but it consistently fails.
> 
> I run the following command. It hangs for ~85 minutes every time (I've
> tried at least 5 times)

Does it work if you just open the device? For example try

cryptsetup luksOpen /dev/md1 --test-passphrase

> and then fails with the "Not compatible PBKDF2 options" message and exit code 1.
> 
>     $ sudo cryptsetup luksAddKey /dev/md1 /etc/.md1.key
>     Enter any existing passphrase:
>     Not compatible PBKDF2 options (using hash algorithm sha256).

Could you please send output with added --debug switch?

It is failing PBKDF2 benchmark here so please try and send output
of these commands as well:

cryptsetup benchmark -h sha256 --debug
cryptsetup benchmark -h sha1 --debug

What distro and version it is?
Do you compile anything (kernel, cryptsetup, library...) yourself?

> I've tried generating several different keys of different sizes.
> Exact same behavior for all of them.

Key format is not the problem here.

Milan