Comment # 12 on bug 1184069 from Andreas Stieger

(In reply to Klaus Mueller from comment #11)
> Here it takes 22s to get the key on a
> Ryzen 7 1700X CPU. This is 21s more than it should take!

It is true that the key strengthening function is tuned to take about 1000ms
for a single run to generate the key from the passphrase. The underlying
problem is that the single-threaded performance for this operation has diverged
so much from the running system to grub, so that strengthening parameters
picked will make it run slower in grub. You can use different parameters, it is
not fundamentally less secure.