Describe password-based key derivation functions used in full disk encryption systems, focus on LUKS2.

Compare Argon2 memory-hard function to the PBKDF2 algorithm and other state-of-the-art functions.

Describe the motivation for the use of CPU/memory intensive functions.

Try to create an attacker cost model for dictionary and brute-force attacks to a system using such a function. Perform some experiments on local machines to estimate real-world Argon2 cost parameters.

Estimate the cost of attacking LUKS2 with Argon2 using existing and near-future architectures (expect an attacker can use on-demand allocated resources).

Analyse output and try to propose changes in Argon2 parameters to increase security margin. Does current LUKS2 use safe defaults?

Literature:

• Examining PBKDF2 security margin -- case study of LUKS (author's manuscript)
• PBKDF2 and Argon2 specification
• LUKS and LUKS2 documentation and cryptsetup source code