Re: Filesystem encryption question

2011-07-23 Thread Otavio Salvador
On Sat, Jul 23, 2011 at 09:22, Philipp Kern wrote: > On 2011-07-22, Otavio Salvador wrote: >>> 2) two new options into expert-mode installer: >>> -s 512 -c aes-xts-plain64 (future new standard) >>> -s 256 -c aes-xts-plain64 (performance option) >> Please report a bug against partman-crypto so we

Re: Filesystem encryption question

2011-07-23 Thread Philipp Kern
On 2011-07-22, Otavio Salvador wrote: >> 2) two new options into expert-mode installer: >> -s 512 -c aes-xts-plain64 (future new standard) >> -s 256 -c aes-xts-plain64 (performance option) > Please report a bug against partman-crypto so we can handle it. It's another variant for #482092 though.

Re: Filesystem encryption question

2011-07-22 Thread Otavio Salvador
2011/7/16 Zdenek Kaspar : ... > 1) d-i kernel needs to support: CONFIG_CRYPTO_XTS and CONFIG_CRYPTO_GF128MUL This is enabled on kernels and now I queued it to inclusion for next kernel uploads. > 2) two new options into expert-mode installer: > -s 512 -c aes-xts-plain64 (future new standard) > -s

Filesystem encryption question

2011-07-16 Thread Zdenek Kaspar
Hi, I think it's good time to use XTS for filesystem encryption since RedHat already does so in rhel5/6. Looks like cryptsetup -c aes-xts-plain64 -s 512 is their standard for filesystem encryption during system install. 1) d-i kernel needs to support: CONFIG_CRYPTO_XTS and CONFIG_CRYPTO_GF128MUL