Module Name: src Committed By: nia Date: Fri Sep 27 12:49:41 UTC 2024
Modified Files: src/share/man/man4: cgd.4 Log Message: cgd.4: aes mode advice from riastradh@ To generate a diff of this commit: cvs rdiff -u -r1.24 -r1.25 src/share/man/man4/cgd.4 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
Modified files: Index: src/share/man/man4/cgd.4 diff -u src/share/man/man4/cgd.4:1.24 src/share/man/man4/cgd.4:1.25 --- src/share/man/man4/cgd.4:1.24 Mon Aug 17 17:18:02 2020 +++ src/share/man/man4/cgd.4 Fri Sep 27 12:49:41 2024 @@ -1,4 +1,4 @@ -.\" $NetBSD: cgd.4,v 1.24 2020/08/17 17:18:02 riastradh Exp $ +.\" $NetBSD: cgd.4,v 1.25 2024/09/27 12:49:41 nia Exp $ .\" .\" Copyright (c) 2002, 2003 The NetBSD Foundation, Inc. .\" All rights reserved. @@ -27,7 +27,7 @@ .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE .\" POSSIBILITY OF SUCH DAMAGE. .\" -.Dd August 16, 2020 +.Dd September 27, 2024 .Dt CGD 4 .Os .Sh NAME @@ -83,6 +83,10 @@ encryption under .Tn AES of the little-endian encoding of the disk sector number. The default key length is 128 bits. +.Tn CBC +mode is expected to provide marginally better theoretical security than +.Tn XTS +mode. .It Li "aes-xts" (key sizes: 256 or 512 bits) .Tn AES in @@ -100,6 +104,10 @@ or keys. The default key length is 256, meaning .Tn AES-128. +.Tn XTS +mode is expected to provide marginally better theoretical performance than +.Tn CBC +mode. .El .Ss Obsolete Ciphers The following obsolete ciphers are supported for compatibility with