Maybe I wasn't clear. When using: Cipher-CBC-essiv:Hash In the kernel the IV for each sector will be calculated as follows: SALT=Hash(KEY) IV=Encrypt-Cipher-ECB(SALT,sectornumber) Therefore the SALT(which is the digest) must be in the range of the Cipher minimum to maximum key size in ECB mode. Regards Ronen Shitrit -----Original Message----- From: gimeshell@xxxxxx [mailto:gimeshell@xxxxxx] Sent: Tuesday, March 28, 2006 1:04 PM To: Ronen Shitrit Cc: dm-crypt@xxxxxxxx Subject: Re: [dm-crypt] essiv mode. On Tue, 14 Mar 2006 17:47:06 +0200 "Ronen Shitrit" <rshitrit@xxxxxxxxxxx> wrote: > > When using the essiv the HASH digest size must be in the range of the > cipher minimum to maximum key size in ECB mode. > ECB doesn't use any initialization vector. --------------------------------------------------------------------- - http://www.saout.de/misc/dm-crypt/ To unsubscribe, e-mail: dm-crypt-unsubscribe@xxxxxxxx For additional commands, e-mail: dm-crypt-help@xxxxxxxx