Latest release spins CPU

[notramo]

On Void Linux musl, age 1.1.1 infinitely spins CPU when using password encryption.

[rumpelsepp]

Can confirm this. Decrypting a small textfile with one line takes up to 5 minutes. I traced this down to this:

age/scrypt.go

Line 163 in 8e3f74c

k, err := scrypt.Key(i.password, salt, 1<<logN, 8, 1, chacha20poly1305.KeySize)

[FiloSottile]

Interesting, I don't think we changed anything related to scrypt in this release. Did you maybe update the Go version at the same time? What happens if you build age v1.1.1 with an older version of Go?

[rumpelsepp]

I did a few tests yesterday, I downgraded the crypto package a few times. The problem stayed the same and was reproducible. Currently, I am not suffering from this problem any more, because I did a sysupgrade and rebooted my system. 😮 I will try a different go version once it reappears.

[FiloSottile]

because I did a sysupgrade and rebooted my system

Huh!

If anyone else can reproduce it, I would love to get the binary and uname -a output, so I can try to track it down.