Hi all,

Thanks for the bug report.

Okay I've tracked this down.  It helped quite a bit to see that it's
mostly Atom processors (eee pc's, and netbooks).

This is totally a function of eCryptfs' key strengthening mechanism.  For more 
information about key strengthening, see:
 * http://en.wikipedia.org/wiki/Key_strengthening

The goal here is to make your eCryptfs keys as strong as possible.  In
the course of generating your fekek (file encryption key encryption key
-- see the ecryptfs source code for more details), we perform a has
iterative sha512 hash ~65,000 times.  This is a non-trivial operation,
and it's intended to make brute force attacks against your passphrases
65,000 times harder.

While many desktop/laptop/server CPU's can do this key strengthening in
about ~1 second, it's taking a bit longer on lower power processors.

Unfortunately, this is not something we're going to be able to solve
without breaking the ABI/API of eCryptfs.  We would need two different
versions--a weak-key and a normal key mode.  I doubt we're going to
solve this any time soon.  I'm going to have to mark this "won't fix"
for now.  Sorry!

:-Dustin

** Changed in: ecryptfs-utils (Ubuntu)
       Status: New => Won't Fix

-- 
pam_encryptfs.so causes authentication to be slow
https://bugs.launchpad.net/bugs/295429
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to