Re: [Qemu-devel] [PATCH v3] Describe flaws in qcow/qcow2 encryption in the docs

2014-01-27 Thread Stefan Hajnoczi
On Wed, Jan 22, 2014 at 03:47:10PM +, Daniel P. Berrange wrote: > The qemu-img.texi / qemu-doc.texi files currently describe the > qcow2/qcow2 encryption thus > > "Encryption uses the AES format which is very secure (128 bit >keys). Use a long password (16 characters) to get maximum >

Re: [Qemu-devel] [PATCH v3] Describe flaws in qcow/qcow2 encryption in the docs

2014-01-22 Thread Eric Blake
On 01/22/2014 08:47 AM, Daniel P. Berrange wrote: > The qemu-img.texi / qemu-doc.texi files currently describe the > qcow2/qcow2 encryption thus > > Recommend against any use of QCow/QCow2 encryption, directing > users to dm-crypt / LUKS which can meet modern cryptography > best practices. > > S

[Qemu-devel] [PATCH v3] Describe flaws in qcow/qcow2 encryption in the docs

2014-01-22 Thread Daniel P. Berrange
The qemu-img.texi / qemu-doc.texi files currently describe the qcow2/qcow2 encryption thus "Encryption uses the AES format which is very secure (128 bit keys). Use a long password (16 characters) to get maximum protection." While AES is indeed a strong encryption system, the way that QCow