Arch Linux

yydqd9r

Member

Registered: 2024-11-06

Posts: 4

[SOLVED] How to force exact memory for argon2id in cryptsetup?

Hi,

I know --pbkdf-memory is just a max limit, not an exact value. Actual memory used (seen in luksDump) changes every time. The --debug shows it runs benchmarks and picks values based on that.

I’ve been running this for over an hour:

cryptsetup luksFormat --type luks2 device

But, I never got exactly 1048576 .....

I always got a value between 700000 and 720000.

On the same hardware, I remember getting 1048576 on the first try, so it's not impossible.

cryptsetup version: 2.7.5

Just want 1 GiB for peace of mind, not technical required.

Thanks you,
yydqd9r

Last edited by yydqd9r (2025-04-05 13:45:08)

yydqd9r

Member

Registered: 2024-11-06

Posts: 4

Re: [SOLVED] How to force exact memory for argon2id in cryptsetup?

I should have done more research—really sorry

The answer was right here: cryptsetup(8) man page

And this stackexchange post helped me understand how to choose a good iteration count.

The cryptsetup benchmark command was also useful in figuring out a suitable number of iterations.

Last edited by yydqd9r (2025-04-05 13:24:10)