[Bug 202365] [patch] [geli] Consider improving PBKDF2 performance

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=202365

            Bug ID: 202365
           Summary: [patch] [geli] Consider improving PBKDF2 performance
           Product: Base System
           Version: 11.0-CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Keywords: patch
          Severity: Affects Some People
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: jpixton at gmail.com
          Keywords: patch

Created attachment 159924
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=159924&action=edit
proposed patch

The PBKDF2 in sys/geom/eli/pkcs5v2.c is around half the speed than it could be.
 I have some background on this issue on my blog[1].

I've attached a patch which does the minimum needed changes.  This processes
the HMAC key (in PBKDF2, the password) once, and then uses this as a starting
point for all the subsequent computations.

- For existing volumes, this should roughly double the mounting speed (measured
as 51% of previous on my machine).
- For new volumes it should approximately double the security margin (measured
as 196% of previous on my machine).

Cheers,
Joe

[1]: https://jbp.io/2015/08/11/pbkdf2-performance-matters/

-- 
You are receiving this mail because:
You are the assignee for the bug.