Mailinglist Archive: opensuse-factory (355 mails)

< Previous Next >
Aw: Re: [opensuse-factory] time to unlock fully encrypted partition
  • From: "Axel Braun" <axel.braun@xxxxxx>
  • Date: Sun, 8 Mar 2020 17:39:04 +0100
  • Message-id: <trinity-61fe91a9-c00a-4bbd-956c-f28a9c51c23b-1583685544159@3c-app-gmx-bs09>
Hello Adam,

Gesendet: Sonntag, 08. März 2020 um 14:30 Uhr
Von: "Adam Mizerski" <adam@xxxxxxxxxxx>
An: opensuse-factory@xxxxxxxxxxxx
Betreff: Re: [opensuse-factory] time to unlock fully encrypted partition

W dniu 08.03.2020 o 14:10, Axel Braun pisze:

I have a new TW installation with a 940GB encrypted root partition
(including /boot, excluding /boot/efi).
When starting the machine, grub asks in text mode for the passphrase.
After entering the passphrase, it takes about 20s until the graphical boot
screen appears.

I feel this is much too long....

Has anyone a similar experience?

This might be useful:
https://unix.stackexchange.com/questions/369414/grub-takes-too-long-to-unlock-the-encrypted-boot-partition

Indeed interesting.
This is what it looks:

X1E:/home/test # lsblk
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
nvme0n1 259:0 0 953,9G 0 disk
├─nvme0n1p1 259:1 0 500M 0 part /boot/efi
├─nvme0n1p2 259:2 0 937G 0 part
│ └─cr_root 254:0 0 937G 0 crypt /
└─nvme0n1p3 259:3 0 16,4G 0 part [SWAP]

linux:/home/test # cryptsetup luksDump /dev/nvme0n1p2
LUKS header information for /dev/nvme0n1p2

Version: 1
Cipher name: aes
Cipher mode: xts-plain64
Hash spec: sha256
Payload offset: 4096
MK bits: 512
MK digest: c3 b3 b9 a1 4b cd 08 8d 93 47 59 be f1 b8 f3 24 5f ae 81 75
MK salt: 8b 87 eb c4 bd 43 4e af 57 ef eb 9f 3c 38 a9 8a
f4 c5 63 2f 1b f6 98 1a 49 62 36 e0 9e 12 8a db
MK iterations: 153840
UUID: 720864c9-f8ed-405e-9a17-ccfa1d2f347b

Key Slot 0: ENABLED
Iterations: 1229280
Salt: 5f 9b 38 6b 29 b4 2e b0 80 35 c5 bd 88 9f 77 61
29 6c 34 00 54 3c af a5 5a d4 f6 15 7e e4 8d c4
Key material offset: 8
AF stripes: 4000
Key Slot 1: DISABLED
Key Slot 2: DISABLED
Key Slot 3: DISABLED
Key Slot 4: DISABLED
Key Slot 5: DISABLED
Key Slot 6: DISABLED
Key Slot 7: DISABLED


Following the reading above, the hash of 256 should be OK. I reduced the
itercounts to 1000 (ms), that reduced it to 13s

The size of disk is not important. 20 seconds is indeed too long. What
CPU do you have?

Processors: 12 × Intel® Core™ i7-9750H CPU @ 2.60GHz
Memory: 15,4 GiB

(I guess this is not the problem)

Cheers
Axel
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-factory+owner@xxxxxxxxxxxx

< Previous Next >
Follow Ups