Re: Filesystem encryption question

2011-07-23 Thread Philipp Kern
On 2011-07-22, Otavio Salvador ota...@ossystems.com.br wrote: 2) two new options into expert-mode installer: -s 512 -c aes-xts-plain64 (future new standard) -s 256 -c aes-xts-plain64 (performance option) Please report a bug against partman-crypto so we can handle it. It's another variant for

Re: Filesystem encryption question

2011-07-23 Thread Otavio Salvador
On Sat, Jul 23, 2011 at 09:22, Philipp Kern tr...@philkern.de wrote: On 2011-07-22, Otavio Salvador ota...@ossystems.com.br wrote: 2) two new options into expert-mode installer: -s 512 -c aes-xts-plain64 (future new standard) -s 256 -c aes-xts-plain64 (performance option) Please report a bug

Re: Filesystem encryption question

2011-07-22 Thread Otavio Salvador
2011/7/16 Zdenek Kaspar zkaspa...@gmail.com: ... 1) d-i kernel needs to support: CONFIG_CRYPTO_XTS and CONFIG_CRYPTO_GF128MUL This is enabled on kernels and now I queued it to inclusion for next kernel uploads. 2) two new options into expert-mode installer: -s 512 -c aes-xts-plain64 (future

Filesystem encryption question

2011-07-16 Thread Zdenek Kaspar
Hi, I think it's good time to use XTS for filesystem encryption since RedHat already does so in rhel5/6. Looks like cryptsetup -c aes-xts-plain64 -s 512 is their standard for filesystem encryption during system install. 1) d-i kernel needs to support: CONFIG_CRYPTO_XTS and