Re: [Qemu-devel] [PATCH] Describe flaws in qcow/qcow2 encryption in the docs

2014-01-22 Thread Peter Maydell
On 22 January 2014 11:36, Daniel P. Berrange wrote: > Recommend against any use of QCow/QCow2 encryption, directing > users to dm-crypt / LUKS which can meet modern cryptography > best practices. Couple of minor typo nits I spotted: > diff --git a/qemu-doc.texi b/qemu-doc.texi > index 4e9c6e9..c

Re: [Qemu-devel] [PATCH] Describe flaws in qcow/qcow2 encryption in the docs

2014-01-22 Thread Daniel P. Berrange
On Wed, Jan 22, 2014 at 11:49:21AM +, Peter Maydell wrote: > On 22 January 2014 11:36, Daniel P. Berrange wrote: > > Recommend against any use of QCow/QCow2 encryption, directing > > users to dm-crypt / LUKS which can meet modern cryptography > > best practices. > > Couple of minor typo nits

Re: [Qemu-devel] [PATCH] Describe flaws in qcow/qcow2 encryption in the docs

2014-01-22 Thread Eric Blake
On 01/22/2014 04:36 AM, Daniel P. Berrange wrote: > The qemu-img.texi / qemu-doc.texi files currently describe the > qcow2/qcow2 encryption thus > > "Encryption uses the AES format which is very secure (128 bit >keys). Use a long password (16 characters) to get maximum >protection." > >

[Qemu-devel] [PATCH] Describe flaws in qcow/qcow2 encryption in the docs

2014-01-22 Thread Daniel P. Berrange
The qemu-img.texi / qemu-doc.texi files currently describe the qcow2/qcow2 encryption thus "Encryption uses the AES format which is very secure (128 bit keys). Use a long password (16 characters) to get maximum protection." While AES is indeed a strong encryption system, the way that QCow