siyuan-note/siyuan · error

Argon2id Iterations too high (maximum 10)

Error message

Argon2id Iterations too high (maximum 10)

What it means

Raised by ValidateArgon2Params when p.Iterations > 10. The upper bound caps the cost of a single derivation so a malicious or misconfigured backup cannot make unlock impractically slow (or be used as a compute-DoS vector).

Source

Thrown at kernel/util/kdf.go:77

}

// ValidateArgon2Params 校验 Argon2id 参数是否在合理范围内，防止恶意备份设置极大内存导致 OOM，
// 或过弱参数降低安全性。
func ValidateArgon2Params(p Argon2Params) (Argon2Params, error) {
	if p.KeyLength != 32 {
		return p, errors.New("Argon2id KeyLength must be 32")
	}
	if p.Memory < 64*1024 {
		return p, errors.New("Argon2id Memory too low (minimum 64 MB)")
	}
	if p.Memory > 256*1024 {
		return p, errors.New("Argon2id Memory too high (maximum 256 MB)")
	}
	if p.Iterations < 3 {
		return p, errors.New("Argon2id Iterations too low (minimum 3)")
	}
	if p.Iterations > 10 {
		return p, errors.New("Argon2id Iterations too high (maximum 10)")
	}
	if p.Parallelism == 0 || p.Parallelism > 16 {
		return p, errors.New("Argon2id Parallelism must be between 1 and 16")
	}
	return p, nil
}

// DeriveKey 用 Argon2id 从密码派生密钥。同一 password+salt+params 多次调用结果一致。
func DeriveKey(password string, salt []byte, p Argon2Params) []byte {
	return argon2.IDKey([]byte(password), salt, p.Iterations, p.Memory, p.Parallelism, p.KeyLength)
}

// Encrypt 用 AES-256-GCM 加密。每次调用生成随机 nonce，因此同一明文多次加密结果不同。
// 返回格式：magic(4B) || spec(1B) || algorithm(1B) || nonceLength(1B) || nonce || ciphertext || GCM tag(16B)。
func Encrypt(key, plaintext []byte) ([]byte, error) {
	return encryptGCM(key, plaintext, nil, "Encrypt")
}

View on GitHub (pinned to 251596fc0d)

Solutions

1. Lower KDFParams.Iterations to <= 10 (DefaultArgon2Params uses 3).
2. Do not accept crypto configs from untrusted backups; clamp Iterations if you must import.
3. Regenerate params via the official change-password flow.

Example fix

// before: above the supported ceiling
params := util.Argon2Params{Memory: 64 * 1024, Iterations: 20, Parallelism: 4, KeyLength: 32}

// after
params := util.Argon2Params{Memory: 64 * 1024, Iterations: 10, Parallelism: 4, KeyLength: 32}

if p.Iterations > 10 {
    return fmt.Errorf("rejecting crypto config: Iterations %d exceeds the supported maximum 10", p.Iterations)
}
if _, err := util.ValidateArgon2Params(p); err != nil {
    return err
}

When it happens

Trigger: KDFParams.Iterations is loaded above 10 from an imported or tampered notebook crypto config.

Common situations: A user cranks iterations to harden KDF beyond the supported ceiling; a malicious backup crafted to stall unlock; a unit/format confusion when serializing the field.

Related errors

• Argon2id Memory too high (maximum 256 MB)
• Argon2id KeyLength must be 32
• Argon2id Memory too low (minimum 64 MB)
• Argon2id Iterations too low (minimum 3)
• Argon2id Parallelism must be between 1 and 16

AI-assisted analysis of siyuan-note/siyuan@251596fc0d (2026-08-12). Data as JSON: /api/errors/97ce6416059bd7a9. Report an issue: GitHub.