aes-256-xts on a 2.5TB volume ... How much trouble am I in?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi all,

I've recently finished setting up our new file server, whose largest
filesystem is 2.5TB in size; ext3 on dm-crypt (aes-256-xts) on lvm on
md-raid5. The setup seems fine, but googling for an unrelated
performance problem brought to light some disconcerting news:

1) xts becomes more insecure the larger the encrypted volume is and is
thus not recommended for volumes >1TB. Great. How bad is this in my
case on a "makes cracking the encryption easier in theory" -- "any
scriptkiddie can do it in 5 seconds" scale?

2) Something about *-plain being 32 bit only and thus limited to 2TB.
What happens to data over 2TB? Less secure, not encrypted at all, kiss
it goodbye?

I can't recreate the mapping with different settings easily, since
I've already copied the data over and dismantled the old server but of
course everything depends on how bad this is ...

Thank you for your help

Chris
_______________________________________________
dm-crypt mailing list
dm-crypt@xxxxxxxx
http://www.saout.de/mailman/listinfo/dm-crypt

[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux