[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Filesystem encryption question



Hi,

I think it's good time to use XTS for filesystem encryption since RedHat
already does so in rhel5/6.

Looks like cryptsetup -c aes-xts-plain64 -s 512 is their standard for
filesystem encryption during system install.

1) d-i kernel needs to support: CONFIG_CRYPTO_XTS and CONFIG_CRYPTO_GF128MUL

2) two new options into expert-mode installer:
-s 512 -c aes-xts-plain64 (future new standard)
-s 256 -c aes-xts-plain64 (performance option)

Could such modification be done even in a point release ?

TIA, Z.


Reply to: