For new installs, it seems adequate to base the number on the actual hardware, assuming the CRYPTO volume will stay in that hardware for a while.
The current default of 16 is from old PKCS5 PBKDF2 times and changing it in bioctl(8) is a more invasive change (for later, perhaps). Thoughts? Feedback from the crypto folks appreciated. On X230 and T14, 16 feels pretty instant, whereas 'auto' takes about a second on a T14. Index: install.sub =================================================================== RCS file: /cvs/src/distrib/miniroot/install.sub,v retrieving revision 1.1242 diff -u -p -r1.1242 install.sub --- install.sub 17 Apr 2023 13:59:16 -0000 1.1242 +++ install.sub 23 Apr 2023 16:44:47 -0000 @@ -3113,7 +3113,7 @@ __EOT md_prep_fdisk $_chunk softraid echo 'RAID *' | disklabel -w -A -T- $_chunk - until bioctl -c C -l ${_chunk}a softraid0 >/dev/null; do + until bioctl -c C -r auto -l ${_chunk}a softraid0 >/dev/null; do # Most likely botched passphrases, silently retry twice. ((++_tries < 3)) || exit done