On Fri, Feb 11, 2011 at 07:07:24PM +0100, Arno Wagner wrote: > On Fri, Feb 11, 2011 at 04:38:22PM +0100, Milan Broz wrote: > > On 02/11/2011 02:44 PM, Christoph Anton Mitterer wrote: > > > On Fri, 2011-02-11 at 14:42 +0100, Arno Wagner wrote: > > >> Hmm. Does some distro use XTS mode with 512 bit keys as > > >> default? Which one? > > > Perhaps not distros, but I guess there are quite a few people using XTS > > > with two 256 bit keys. > > > > Even distros, Fedora and RHEL6 installers are using XTS with 512bit > > keys (thus AES256). > > > > (It is not crytpsetup default there, installer overrides it > > when encrypted install is selected.) > > > > Milan > > Ok, thanks. I will add a warning about non-default parameters > and also give the numbers for 512 bit in the layout section > and in the explanation on how to overwrite the keyslots. Fixed and hopefully correct. I verified the positions against a LUKS loopfile with aes-xts-plain and 512 bit keylength. Arno -- Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@xxxxxxxxxxx GnuPG: ID: 1E25338F FP: 0C30 5782 9D93 F785 E79C 0296 797F 6B50 1E25 338F ---- Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans If it's in the news, don't worry about it. The very definition of "news" is "something that hardly ever happens." -- Bruce Schneier _______________________________________________ dm-crypt mailing list dm-crypt@xxxxxxxx http://www.saout.de/mailman/listinfo/dm-crypt
