From owner-freebsd-questions@FreeBSD.ORG Sat Oct 27 11:08:54 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0F9A016A420 for ; Sat, 27 Oct 2007 11:08:54 +0000 (UTC) (envelope-from mymailfloods@googlemail.com) Received: from wa-out-1112.google.com (wa-out-1112.google.com [209.85.146.181]) by mx1.freebsd.org (Postfix) with ESMTP id DCAED13C48E for ; Sat, 27 Oct 2007 11:08:53 +0000 (UTC) (envelope-from mymailfloods@googlemail.com) Received: by wa-out-1112.google.com with SMTP id k17so1402358waf for ; Sat, 27 Oct 2007 04:08:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; bh=rh9IIg03FtTp+DnE6XS8R+D1WOYfi8gIPxsHlLYke2E=; b=hOUb+lKfrWmLPdY/59+UkaG39zbCt/vGS1WqyOLswl3t0pIpaVtPXRut3Fk6Lp8o3ooG40aAAZwTEQyJ5YeguXaLGYDuZ1/evipCETNEH7c9UelHw4MjZ4sbpGwPRGRJzDa011JE2of3MT2QPs3aYuHkho7rX7mPtjgIyAurYJ0= DomainKey-Signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=ggGpeOoQSXnm2rdbG5MoPEud7HqVDKe4YsflWLLlIXIPW9btVHTZTwhFM0o0Q+9ZZToATHD7iSH9PhtJzkRYa37JNqa0kK1C3Wj9Rql83LoFxUVYDPkNCdb64vP5vZJxKk0fcXzMqAXLFKRfOKaS4zmZsPcwbQwlEXTULCm5Mc8= Received: by 10.114.156.1 with SMTP id d1mr4529128wae.1193481600657; Sat, 27 Oct 2007 03:40:00 -0700 (PDT) Received: by 10.114.36.17 with HTTP; Sat, 27 Oct 2007 03:40:00 -0700 (PDT) Message-ID: Date: Sat, 27 Oct 2007 12:40:00 +0200 From: "Thomas Hobbes" To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline Subject: Harddisk encryption with geli: key's block size X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 27 Oct 2007 11:08:54 -0000 Hi, I want to encrypt my mobile computer's data-partition with a passphrase, 128 bit AES and HMAC/MD5. A lot of people use different block sizes to generate keys with dd. There are examples with block sizes of 64, 32k and 128k in geli's man-page, but I couldn't find out why they were used. Spidering 'geli + "key bs"' discovered that there are some more values used, i.e. 128, 512 and 1k. What is a reasonable block size to use? Bye Thomas