> While recent grub2 finally has limited support for luks2, it only > supports the weaker KDF (key derivation function) (PBKDF2?), as I > understand it, though would be happy to be proven wrong!
i have just spent half an hour reading the linked PR's and patch emails, and unfortunately you seem to be right. i don't see why progress is so slow on this. some of the patches are 5+ years old! and the submitters seem to be constructive and responsive. a good entry point that collects the relevant links: https://github.com/johnlane/grub/issues/21 -- • attila lendvai • PGP: 963F 5D5F 45C7 DFCD 0A39 -- “The probability of the people in power being individuals who would dislike the possession and exercise of power is on a level with the probability that an extremely tender-hearted person would get the job of whipping-master on a slave plantation.” — Frank H. Knight