diff options
| -rw-r--r-- | docs/gnulinux/encrypted_parabola.html | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/docs/gnulinux/encrypted_parabola.html b/docs/gnulinux/encrypted_parabola.html index 24a9dac8..cb5f8f52 100644 --- a/docs/gnulinux/encrypted_parabola.html +++ b/docs/gnulinux/encrypted_parabola.html @@ -147,6 +147,11 @@ Note that the default iteration time is 2000ms (20 seconds) if not specified in cryptsetup. You should set a lower time than this, otherwise there will be an approximate 20 second delay when booting your system. + We recommend 500ms (5 seconds), and this is included in the prepared + cryptsetup command below. + Note that the iteration time is for security purposes (mitigates + brute force attacks), so anything lower than 5 seconds is probably + not ok. </p> <p> I am using MBR partitioning, so I use cfdisk:<br/> @@ -177,7 +182,7 @@ </p> <p> I am initializing LUKS with the following:<br/> - # <b>cryptsetup -v --cipher serpent-xts-plain64 --key-size 512 --hash whirlpool --use-random --verify-passphrase luksFormat /dev/sda1</b> + # <b>cryptsetup -v --cipher serpent-xts-plain64 --key-size 512 --hash whirlpool --iter-time 500 --use-random --verify-passphrase luksFormat /dev/sda1</b> Choose a <b>secure</b> passphrase here. Ideally lots of lowercase/uppercase numbers, letters, symbols etc all in a random pattern. The password length should be as long as you are able to handle without writing it down or storing it anywhere. </p> |