What key derivation time would you advise targeting for a server with 20-100 disks, where each disk has a unique KDF salt?
How many times stronger would scrypt targeting 2s be compared to PBKDF2 targeting 2s? If using scrypt for many disks would it then be safe to target 10-100ms so as not to impact on reboot times?
It's a single process managing multiple disks with a fixed-size extent system on each.
1. The process has a single passphrase entered at startup.
2. This passphrase is then used to derive the master key encryption key for each disk using the disk's own parameters (KDF_SALT, KDF_ITERATIONS) which are generated and estimated when the disk is formatted and added to the array (disks may come and go).
3. The master key encryption key for each disk is then used to decrypt the AF-split master key for each disk, similar to LUKS.
How many times stronger would scrypt targeting 2s be compared to PBKDF2 targeting 2s? If using scrypt for many disks would it then be safe to target 10-100ms so as not to impact on reboot times?