Allan Jude 85c15ab853 improve PBKDF2 performance ... The PBKDF2 in sys/geom/eli/pkcs5v2.c is around half the speed it could be GELI's PBKDF2 uses a simple benchmark to determine a number of iterations that will takes approximately 2 seconds. The security provided is actually half what is expected, because an attacker could use the optimized algorithm to brute force the key in half the expected time. With this change, all newly generated GELI keys will be approximately 2x as strong. Previously generated keys will talk half as long to calculate, resulting in faster mounting of encrypted volumes. Users may choose to rekey, to generate a new key with the larger default number of iterations using the geli(8) setkey command. Security of existing data is not compromised, as ~1 second per brute force attempt is still a very high threshold. PR: 202365 Original Research: https://jbp.io/2015/08/11/pbkdf2-performance-matters/ Submitted by: Joe Pixton <jpixton@gmail.com> (Original Version), jmg (Later Version) Reviewed by: ed, pjd, delphij Approved by: secteam, pjd (maintainer) MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D8236		2017-02-19 19:30:31 +00:00
..
bde
cache
concat
eli	improve PBKDF2 performance	2017-02-19 19:30:31 +00:00
gate
journal	Defer startup of gjournal switcher kproc.	2017-02-07 22:45:59 +00:00
label
linux_lvm
mirror
mountver
multipath	Report disk addition errors on add or create subcommand.	2017-01-20 13:49:04 +00:00
nop
part	Check that primary GPT header is valid before wiping partitioning.	2017-02-04 05:09:47 +00:00
raid	g_raid: Prevent tasters from attempting excessively large reads	2017-01-12 06:58:31 +00:00
raid3
sched
shsec
stripe
uzip
vinum	Fix logic error in gvinum's gv_set_sd_state()	2017-01-08 17:56:54 +00:00
virstor
zero
geom_aes.c
geom_bsd_enc.c
geom_bsd.c	Remove pc98 support completely.	2017-01-28 02:22:15 +00:00
geom_ccd.c
geom_ctl.c
geom_ctl.h
geom_dev.c
geom_disk.c	Report random flash storage as non-rotating to GEOM_DISK.	2017-01-12 08:53:10 +00:00
geom_disk.h	Report random flash storage as non-rotating to GEOM_DISK.	2017-01-12 08:53:10 +00:00
geom_dump.c
geom_event.c
geom_flashmap.c
geom_fox.c
geom_int.h
geom_io.c
geom_kern.c
geom_map.c	build: Unbreak LINT	2016-12-21 01:39:11 +00:00
geom_mbr_enc.c
geom_mbr.c
geom_redboot.c
geom_slice.c
geom_slice.h
geom_subr.c
geom_sunlabel_enc.c
geom_sunlabel.c
geom_vfs.c
geom_vfs.h
geom_vol_ffs.c
geom.h
notes