Hi Kristian, that depends on your attacker model. In principle, DJB has done very solid work in the past, and Salsa20 has seen at least reasonable cryptoanalysis. XChaCha12 should still have enought rounds to be secure for a while. The best attacks on ChaCha seem to work only up to 7 rounds, AFAIK, and has something like 2^250 effort. So, for almost all uses, this should provide pretty good security. If you are acually somebody in the class of Assange/BinLaden/etc., where the NSA will invest real effort to get into the crypto, or in a comparable situation, it would be better to use the mainstream, which has seen significantly more crypto-analyses efforts. Regards, Arno On Tue, May 14, 2019 at 12:17:01 CEST, Kristian Klausen wrote: > Hi > > I have a weak Intel Atom(N450) server and three external HDDs. I want to > use the HDDs in RAID 5 with encryption and integrity[1]. > > The Atom CPU is rather weak: > # Algorithm | Key | Encryption | Decryption > aes-xts 256b 36.5 MiB/s 37.0 MiB/s > xchacha12,aes-adiantum 256b 83.4 MiB/s 84.3 MiB/s > > So I want to use Adiantum, is it safe to combine them? > > Ex[2][3]: cryptsetup luksFormat --type luks2 <device> --cipher xchacha12,aes-adiantum --integrity poly1305 > > [1] https://gist.github.com/MawKKe/caa2bbf7edcc072129d73b61ae7815fb > [2] https://mirrors.edge.kernel.org/pub/linux/utils/cryptsetup/v2.0/v2.0.0-ReleaseNotes > [3] https://mirrors.edge.kernel.org/pub/linux/utils/cryptsetup/v2.0/v2.0.6-ReleaseNotes > > Regards > Kristian Klausen > > _______________________________________________ > dm-crypt mailing list > dm-crypt@xxxxxxxx > https://www.saout.de/mailman/listinfo/dm-crypt -- Arno Wagner, Dr. sc. techn., Dipl. Inform., Email: arno@xxxxxxxxxxx GnuPG: ID: CB5D9718 FP: 12D6 C03B 1B30 33BB 13CF B774 E35C 5FA1 CB5D 9718 ---- A good decision is based on knowledge and not on numbers. -- Plato If it's in the news, don't worry about it. The very definition of "news" is "something that hardly ever happens." -- Bruce Schneier _______________________________________________ dm-crypt mailing list dm-crypt@xxxxxxxx https://www.saout.de/mailman/listinfo/dm-crypt
