Date: Sun, 17 Apr 2011 23:41:40 +0200 From: Christian Baer <christian.baer@uni-dortmund.de> To: freebsd-geom@freebsd.org Subject: Re: Maximum secure filesystem-size with geli Message-ID: <iofmqk$8ck$1@dough.gmane.org> In-Reply-To: <20110417171659.GD22319@garage.freebsd.pl> References: <fc5ee742-9f3a-4418-9fe7-4062de807360@email.android.com> <20110417171659.GD22319@garage.freebsd.pl>
next in thread | previous in thread | raw e-mail | index | archive | help
On 17.04.2011 19:16, Pawel Jakub Dawidek wrote: > Recent GELI uses one key for every 2^20 sectors, so no more than > (2^20)*sectorsize bytes is encrypted using one key, so file system size > should not be an issue. Hmm, then I guess it was a good idea to update from 8.0 before I set up the new drive. :-) Thank you for the infomation so far! This however makes another question arise: Is there some recommendation on the ratio between geli's -s option and the options -b and -f of newfs (I don't think -i option is important to geli)? Basicly: If I use different block sizes for the file system (in my case much larger than the default), would it be a good idea to use the same size as geli's sector size? If so, which sizes should be the same? Sector size (geli) and blocksize or frag size (newfs). I intend to use UFS. Best regards and good night! Chris
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?iofmqk$8ck$1>