Date: Sun, 17 Oct 2010 18:59:21 -0400 From: grarpamp <grarpamp@gmail.com> To: freebsd-geom@freebsd.org Subject: GELI XTS Message-ID: <AANLkTinrp1BwYPPGXsdh6XutD008H3YnFNv0xE-qJiSE@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
Is this headed/ready for RELENG_8? Will be initializing a good sized pile of disk before long and was hoping to go with XTS, etc. Also, in general, is there any sort of third party crypto/implementation review on geli and the related kernel crypto bits? Thanks. /head/sys/geom/eli/g_eli_crypto.c ... Revision 213070 etc Modified Thu Sep 23 11:58:36 2010 UTC (3 weeks, 3 days ago) by pjd Add support for AES-XTS. This will be the default now. Implement switching of data encryption key every 2^20 blocks. This ensures the same encryption key won't be used for more than 2^20 blocks (sectors). This will be the default now. MFC after: 1 week /head/sbin/geom/class/eli/geom_eli.c /head/sbin/geom/class/eli/geli.8 ... Revision 213172 etc Modified Sat Sep 25 17:38:57 2010 UTC (3 weeks, 1 day ago) by pjd - Add support for loading passphrase from a file (-J and -j options). This is especially useful for things like installers, where regular geli prompt can't be used. - Add support for specifing multiple -K or -k options, so there is no need to cat all keyfiles and read them from standard input. MFC after: 2 weeks
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AANLkTinrp1BwYPPGXsdh6XutD008H3YnFNv0xE-qJiSE>