diff --git a/ChangeLog.txt b/ChangeLog.txt index 9a8abdd5..4ea7a694 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -10,6 +10,7 @@ New Features & Improvements: * CryFS tells the operating system to not swap the encryption key to the disk (note: this is best-effort and cannot be guaranteed. Hibernation, for example, will still write the encryption key to the disk) * New block size options: 4KB and 16KB * New default block size: 16KB +* Increased scrypt hardness to (N=1048576, r=4, p=8) to make it harder to crack the key while allowing cryfs to take advantage of multicore machines. Fixed bugs: * `du` shows correct file system size on Mac OS X. diff --git a/src/cpp-utils/crypto/kdf/Scrypt.h b/src/cpp-utils/crypto/kdf/Scrypt.h index 596a1f47..b6a8f44e 100644 --- a/src/cpp-utils/crypto/kdf/Scrypt.h +++ b/src/cpp-utils/crypto/kdf/Scrypt.h @@ -22,7 +22,7 @@ namespace cpputils { class SCrypt final : public PasswordBasedKDF { public: static constexpr SCryptSettings ParanoidSettings = SCryptSettings {32, 1048576, 8, 16}; - static constexpr SCryptSettings DefaultSettings = SCryptSettings {32, 1048576, 4, 4}; + static constexpr SCryptSettings DefaultSettings = SCryptSettings {32, 1048576, 4, 8}; static constexpr SCryptSettings TestSettings = SCryptSettings {32, 1024, 1, 1}; static unique_ref forNewKey(const SCryptSettings &settings);