From 8e6b461094305f47a1f0145eed636ca95cb5c8e5 Mon Sep 17 00:00:00 2001
From: Rob Austein <sra@hactrn.net>
Date: Wed, 25 May 2016 23:26:36 -0400
Subject: PBKDF2 works better if we generate the right number of output bytes.

---
 utils/last_gasp_default_pin | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'utils')

diff --git a/utils/last_gasp_default_pin b/utils/last_gasp_default_pin
index e0d9839..c2ca965 100755
--- a/utils/last_gasp_default_pin
+++ b/utils/last_gasp_default_pin
@@ -56,6 +56,10 @@ parser.add_argument("-i", "--iterations",
                     type    = int,
                     default = 100000,
                     help    = "PBKDF2 iteration count")
+parser.add_argument("-d", "--derived-key-length",
+                    type    = int,
+                    default = 64,
+                    help    = "length of BPKDF2 output (must match libhal)")
 args = parser.parse_args()
 
 def HMAC_SHA256(pin, salt):
-- 
cgit v1.2.3