diff --git a/docs/Getting Started/Debian/Debian Buster Root on ZFS.rst b/docs/Getting Started/Debian/Debian Buster Root on ZFS.rst index f08468d..7915682 100644 --- a/docs/Getting Started/Debian/Debian Buster Root on ZFS.rst +++ b/docs/Getting Started/Debian/Debian Buster Root on ZFS.rst @@ -358,15 +358,9 @@ Step 2: Disk Formatting - Make sure to include the ``-part4`` portion of the drive path. If you forget that, you are specifying the whole disk, which ZFS will then re-partition, and you will lose the bootloader partition(s). - - ZFS native encryption defaults to ``aes-256-ccm``, but `the default has - changed upstream + - ZFS native encryption `now `__ - to ``aes-256-gcm``. `AES-GCM seems to be generally preferred over AES-CCM - `__, - `is faster now - `__, - and `will be even faster in the future - `__. + defaults to ``aes-256-gcm``. - For LUKS, the key size chosen is 512 bits. However, XTS mode requires two keys, so the LUKS key is split in half. Thus, ``-s 512`` means AES-256. - Your passphrase will likely be the weakest link. Choose wisely. See