Date: Mon, 9 Aug 2010 22:43:36 +0200 From: Pawel Jakub Dawidek <pjd@FreeBSD.org> To: Nick Ulen <uncle@wolfman.devio.us> Cc: freebsd-geom@freebsd.org Subject: Re: block cipher mode Message-ID: <20100809204336.GA2087@garage.freebsd.pl> In-Reply-To: <20100809193608.GA10991@wolfman.devio.us> References: <20100809193608.GA10991@wolfman.devio.us>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On Mon, Aug 09, 2010 at 03:36:08PM -0400, Nick Ulen wrote: > Greetings, > > What GELI uses: CBC or CBC-ESSIV ? GELI uses CBC with unpredictable IV. IV is generated by calculating SHA256 from IV-Key (which is secret) and sector offset. Not sure if this fully matches ESSIV definition. > man geli remains silent ( > according to http://mareichelt.de/pub/notmine/linuxbsd-comparison.html it's CBC-ESSIV; > dmesg showed AES-CBC. Do you know who is maintaining this page? There are some bits I'd like to update. For example GELI does support two factor authentication and also does support passphrase changing without reencryption. What I find a very important feature of GELI is integrity verification, which discovers any unauthorized data modification and not only protects data privacy. -- Pawel Jakub Dawidek http://www.wheelsystems.com pjd@FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am! [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (FreeBSD) iEYEARECAAYFAkxgaHgACgkQForvXbEpPzTzeQCfQj4jX8T9SmIQQGW0IqcvTQLC 6PMAoI0S5kALLcop//k0k1Cj9FVPQIsX =axG4 -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20100809204336.GA2087>