Milan Broz
cfe2fb66ab
Fix some untranslated error messages.
2019-04-23 10:41:06 +02:00
Milan Broz
2172f1d2cd
Print PBKDF debug log in a better format.
...
Fixes #439 .
2019-02-11 12:37:33 +01:00
Milan Broz
a6f5ce8c7b
Update copyright year.
...
And unify name copyright format.
2019-01-25 09:45:57 +01:00
Milan Broz
580f0f1a28
Add some FIPS mode workarounds.
...
We cannot (yet) use Argon2 in FIPS mode, hack scripts and library
to use PBKDF2 or skip tests and fix tests to run in FIPS mode.
2019-01-24 17:04:13 +01:00
Milan Broz
267bf01259
Add crypt_get_pbkdf_type_params() API.
...
This function allows get default (compiled-in) PBKDF parameters
per every algorithm.
Fixes #397 .
2019-01-03 14:13:01 +01:00
Milan Broz
a5a8467993
Use context in debug log messages.
...
To use per-context logging even for debug messages
we need to use the same macro as for error logging.
2018-11-27 13:37:20 +01:00
Milan Broz
2300c692b8
Check hash value in pbkdf setting early.
2018-11-22 15:51:10 +01:00
Ondrej Kozina
e8b9bfe44c
Use 'cannot' instead of 'can not' in every message.
2018-07-11 22:39:31 +02:00
Ondrej Kozina
24d1798779
Fix mistakes in pbkdf_type verification.
...
- hash is currently relevant only for pbkdf2
- time_ms may be unset (zero) if forced iterations
are set.
Fixes #398 .
2018-07-11 22:23:41 +02:00
Milan Broz
b00a87d8fa
Remove trailing EOL for verbose and error messages.
2018-04-26 10:38:17 +02:00
Milan Broz
f8a7ab1752
Add crypt_get_pbkdf_default() function to get per-type PBKDF default.
2018-04-16 15:26:43 +02:00
Milan Broz
16dc58312c
Move PBKDF limits to crypto backend (to one place).
2018-02-08 15:34:45 +01:00
Ondrej Kozina
169bd9db5e
Do not allow forced pbkdf parameters below minimal values.
2018-02-08 15:33:08 +01:00
Milan Broz
1fe014dbae
Update copyright year.
2018-01-20 17:55:21 +01:00
Milan Broz
74c914475f
Increase maximum allowed PBKDF memory limit.
...
And also fix physical memory trimming function
to really allow requested value.
2018-01-20 17:04:02 +01:00
Milan Broz
fa1f8c0d87
Limit KDF memory by available physical memory.
...
On some systems the requested amount of memory causes OOM killer
to kill the process (instead of returning ENOMEM).
For now, we never try to use more than half of available
physical memory.
2017-12-07 10:43:52 +01:00
Andrea Gelmini
a97de38b6b
Fix typos.
2017-11-08 10:22:49 +01:00
Milan Broz
9f2727bb77
Add libLUKS2.
2017-09-24 19:50:12 +02:00
Milan Broz
66db5b39bb
Change PBKDF insterface to allow forced iterations (time cost) count.
...
Also move functions to separate utils_pbkdf.c file.
PBKDF can be now set for any context.
TODO: new setting is not covered by tests.
2017-09-24 19:49:21 +02:00
