On Fri, Feb 11, 2011 at 04:38:22PM +0100, Milan Broz wrote: > On 02/11/2011 02:44 PM, Christoph Anton Mitterer wrote: > > On Fri, 2011-02-11 at 14:42 +0100, Arno Wagner wrote: > >> Hmm. Does some distro use XTS mode with 512 bit keys as > >> default? Which one? > > Perhaps not distros, but I guess there are quite a few people using XTS > > with two 256 bit keys. > > Even distros, Fedora and RHEL6 installers are using XTS with 512bit > keys (thus AES256). > > (It is not crytpsetup default there, installer overrides it > when encrypted install is selected.) > > Milan Ok, thanks. I will add a warning about non-default parameters and also give the numbers for 512 bit in the layout section and in the explanation on how to overwrite the keyslots. Arno -- Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@xxxxxxxxxxx GnuPG: ID: 1E25338F FP: 0C30 5782 9D93 F785 E79C 0296 797F 6B50 1E25 338F ---- Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans If it's in the news, don't worry about it. The very definition of "news" is "something that hardly ever happens." -- Bruce Schneier _______________________________________________ dm-crypt mailing list dm-crypt@xxxxxxxx http://www.saout.de/mailman/listinfo/dm-crypt