A weak cryptoloop implementation in Linux?

A weak cryptoloop implementation in Linux?

Well, multiplied by the number of processors and cycles the attacker has, with their large budget, compared to the number you have, with your single machine. But it's still a good idea, as long as the hash algorithm doesn't tend to converge or something.

In any case, while salt is good and should be used in any implementation, real security comes from a good passphrase.