From 3d94c40b4a38f2319770e9f51b657d2b7a5006aa Mon Sep 17 00:00:00 2001 From: Richard Laager Date: Thu, 19 May 2022 00:07:30 -0500 Subject: [PATCH] Ubuntu 22.04: Update encryption default note Signed-off-by: Richard Laager --- .../Ubuntu 22.04 Root on ZFS for Raspberry Pi.rst | 10 ++-------- .../Ubuntu/Ubuntu 22.04 Root on ZFS.rst | 10 ++-------- 2 files changed, 4 insertions(+), 16 deletions(-) diff --git a/docs/Getting Started/Ubuntu/Ubuntu 22.04 Root on ZFS for Raspberry Pi.rst b/docs/Getting Started/Ubuntu/Ubuntu 22.04 Root on ZFS for Raspberry Pi.rst index 8fa8076..972b501 100644 --- a/docs/Getting Started/Ubuntu/Ubuntu 22.04 Root on ZFS for Raspberry Pi.rst +++ b/docs/Getting Started/Ubuntu/Ubuntu 22.04 Root on ZFS for Raspberry Pi.rst @@ -453,15 +453,9 @@ Step 2: Setup ZFS - Make sure to include the ``-part4`` portion of the drive path. If you forget that, you are specifying the whole disk, which ZFS will then re-partition, and you will lose the bootloader partition(s). - - ZFS native encryption defaults to ``aes-256-ccm``, but `the default has - changed upstream + - ZFS native encryption `now `__ - to ``aes-256-gcm``. `AES-GCM seems to be generally preferred over AES-CCM - `__, - `is faster now - `__, - and `will be even faster in the future - `__. + defaults to ``aes-256-gcm``. - For LUKS, the key size chosen is 512 bits. However, XTS mode requires two keys, so the LUKS key is split in half. Thus, ``-s 512`` means AES-256. - Your passphrase will likely be the weakest link. Choose wisely. See diff --git a/docs/Getting Started/Ubuntu/Ubuntu 22.04 Root on ZFS.rst b/docs/Getting Started/Ubuntu/Ubuntu 22.04 Root on ZFS.rst index ca7f9f3..cd27f9c 100644 --- a/docs/Getting Started/Ubuntu/Ubuntu 22.04 Root on ZFS.rst +++ b/docs/Getting Started/Ubuntu/Ubuntu 22.04 Root on ZFS.rst @@ -430,15 +430,9 @@ Step 2: Disk Formatting - Make sure to include the ``-part4`` portion of the drive path. If you forget that, you are specifying the whole disk, which ZFS will then re-partition, and you will lose the bootloader partition(s). - - ZFS native encryption defaults to ``aes-256-ccm``, but `the default has - changed upstream + - ZFS native encryption `now `__ - to ``aes-256-gcm``. `AES-GCM seems to be generally preferred over AES-CCM - `__, - `is faster now - `__, - and `will be even faster in the future - `__. + defaults to ``aes-256-gcm``. - For LUKS, the key size chosen is 512 bits. However, XTS mode requires two keys, so the LUKS key is split in half. Thus, ``-s 512`` means AES-256. - Your passphrase will likely be the weakest link. Choose wisely. See