From owner-freebsd-questions@FreeBSD.ORG Thu Jul 26 15:54:21 2012 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id D5D7B106564A for ; Thu, 26 Jul 2012 15:54:21 +0000 (UTC) (envelope-from kudzu@tenebras.com) Received: from mail-wi0-f170.google.com (mail-wi0-f170.google.com [209.85.212.170]) by mx1.freebsd.org (Postfix) with ESMTP id 227878FC0A for ; Thu, 26 Jul 2012 15:54:20 +0000 (UTC) Received: by wibhq12 with SMTP id hq12so5561798wib.1 for ; Thu, 26 Jul 2012 08:54:20 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:x-gm-message-state; bh=AxXrhk+n/mvtLkqzdnjzWV0xlRSzCf+82SKAPu5pD8U=; b=PA6HWG0qMxzEfYekN++dc+i9YPvn/IDL342OS04c9LDcHoss/X6YFHXjA4nh6ma5uh Nu43hDdTGN9N35vhUcwHTt0d9JruPjg3gDRMWIi/T82EG1K48FdMrDEavhAXrpgjwGSc 8+cdw9ESaGVliA52elY6+qPYfPPz9pRRkYetbhcUs3PPYLigENtNQLJLy6zyrm5DRBA9 oOWrOf8NGWVhbhmq7zrEdEQTJcrCdygNCk/6mr5L+gj/eP4cbg8hdv3kxndKQ92WsYUC 1nL2YDC07pa7QGrwAzhhELo5bC0Nf/k8jQQkEtIz93rE/zWybiuhlFmkmvm53D4qdiYV TA2w== MIME-Version: 1.0 Received: by 10.180.78.5 with SMTP id x5mr14571678wiw.13.1343318060165; Thu, 26 Jul 2012 08:54:20 -0700 (PDT) Received: by 10.223.172.129 with HTTP; Thu, 26 Jul 2012 08:54:20 -0700 (PDT) In-Reply-To: References: <201207260052.q6Q0qdss086796@mail.r-bonomi.com> <20120726031450.5c06dd61@gumby.homeunix.com> Date: Thu, 26 Jul 2012 08:54:20 -0700 Message-ID: From: Michael Sierchio To: Ivan Voras Content-Type: text/plain; charset=ISO-8859-1 X-Gm-Message-State: ALoCoQlt/HX1qIy98nLJXmYwezgfojsBXK9mPXNsiRAJsKT51ZHp5QlXtZonjetaxlrqgUe9frfV Cc: freebsd-questions@freebsd.org Subject: Re: geli - selecting cipher X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Jul 2012 15:54:21 -0000 On Thu, Jul 26, 2012 at 8:47 AM, Ivan Voras wrote: > You didn't get an answer because in security, the answer depends on > exact circumstances of use. The short answer is that if you don't have a > specific adversary you need to protect your data from, I'd say that > GELI's CBC is good enough for you. The specific adversary that XEX / XTS etc. is designed to protect against is probably unrealistically strong - someone who can write arbitrary data to raw disk sectors and ask to have them decrypted (chosen ciphertext attack), etc. If you don't need to detect modifications/insertions/deletions that don't go through the GELI layer, I would be perfectly comfortable with AES-CTR mode - it is many times faster than any of the above methods. - M