From 2235fddb9ac65d841130fca971687ec1e2f51a97 Mon Sep 17 00:00:00 2001 From: shimunn Date: Thu, 19 Sep 2019 20:06:17 +0200 Subject: [PATCH] reduce iteration time to 50ms authenicator already prevents bruteforce, no need to slow down the unlock process any further --- src/cli.rs | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/cli.rs b/src/cli.rs index 20073d7..e988d27 100644 --- a/src/cli.rs +++ b/src/cli.rs @@ -3,7 +3,7 @@ use crate::*; use cryptsetup_rs as luks; use cryptsetup_rs::api::{CryptDeviceHandle, CryptDeviceOpenBuilder, Luks1Params}; -use cryptsetup_rs::Luks1CryptDevice; +use cryptsetup_rs::{Luks1CryptDevice, CryptDevice}; use ctap; use ctap::extensions::hmac::{FidoHmacCredential, HmacExtension}; use ctap::FidoDevice; @@ -112,6 +112,7 @@ pub fn add_key_to_luks(device: PathBuf, secret: &[u8; 32]) -> Fido2LuksResult err?, }; + handle.set_iteration_time(50); let slot = handle.add_keyslot(secret, prev_key.as_ref().map(|b| b.as_slice()), None)?; Ok(slot) }