Switch to sha256 and 2s iteration time for LUKS devices defaults.
Note that no longer using SHA1 is just to prevent situation when it is no longer available on hardened systems, there is no known security problem (finding collisions is not a problem for LUKS). Increasing iteration time is in combination with PBKDF2 benchmark fixes try to keep PBKDF2 iteration count still high enough and also acceptable for users. (Long term is to replace PBKDF2 algorithm with Password Hashing Competiton winner.). N.B. distributions can change these defaults in compilation time.
Showing with 2 additions and 2 deletions