search for: essiv

Hi, Short version: If I had a CPU with the aes-ni [1] feature would luks use it? I know that Upstream Vendors Security Guide [2] says: ...snip The default cipher used for LUKS (refer to cryptsetup --help) is aes-cbc-essiv:sha256 (ESSIV - Encrypted Salt-Sector Initialization Vector). Note that the installation program, Anaconda, uses by default XTS mode (aes-xts-plain64) snap... I also found a notion in the forums that maybe only aes-cbc is using aes-ni [3] and that could mean that after a install aes-ni is not used...

.../crypttab since it happens in rc.sysinit, before persistence is available * Modification of ovirt-early so it automatically brings up encrypted swap, if available It works as follows: ovirt_swap_encrypt={Swap|Swap2},cypher1[:cypher2...][;{Swap|Swap2},...] the default cypher is set to aes-cbc-essiv:sha256 Signed-off-by: Ricardo Marin Matinata <matinata at br.ibm.com> --- recipe/common-blacklist.ks | 4 +- recipe/common-pkgs.ks | 1 + recipe/common-post.ks | 12 +++++++++++ scripts/ovirt-config-storage | 19 ++++++++++++++--- scripts/ovirt-early | 3...

Hi everyone, I added a page under the HowTos for Encryption, and then added a guide for encrypting /tmp /swap and /home using cryptsetup and LUKS keys on LVM, when you already have partitions setup. http://wiki.centos.org/HowTos/EncryptTmpSwapHome Regards, Max

...04.23.4.el6 includes the back-ported SHA256-SSSE3 driver. Why is the generic version of the SHA256 driver selected at runtime instead of the SSSE3 version on this x86_64 system? Yes, my CPU does support the SSSE3 instruction set, and the use of SHA256 is invoked by the LUKS "cipher=aes-cbc-essiv:sha256" option. On the running system I see that the sha256-ssse3 driver is not loaded. Further evidence that the generic driver is in use: # grep sha256 /proc/crypto name : sha256 driver : sha256-generic So... what's the trick to using the sha256-ssse3 driver instead of...

.../nerdbynature.de/bench/amd64/2.6.19-rc5-git4/test-3/dm-crypt-3.html details: http://nerdbynature.de/wp/?cat=4 (in short: ext3 pretty fast in all operations. then again, the numbers suggest that sometimes a crypto-fs is faster than withou crypto, eg. 'ext3_no-cipher' vs. 'ext3_aes-cbc-essiv:md5'...that's strange, no?) Thanks, Christian. -- BOFH excuse #11: magnetic interference from money/credit cards

...R10: 0000000000000003 R11: 0000000000000246 R12: 00007fb65606f000 R13: 000000000000001a R14: 00007fb65604e870 R15: 00007fb65606a040 Modules linked in: nls_iso8859_1 nls_cp437 vfat fat usb_storage joydev tcp_diag inet_diag binfmt_misc netconsole configfs cfg80211 8021q veth sha256_generic libsha256 essiv authenc dm_crypt cpuid i2c_dev asus_atk0110 acpi_power_meter it87 hwmon_vid nouveau af_packet bridge video ttm drm_kms_helper stp snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic llc snd_hda_intel syscopyarea sysfillrect snd_intel_dspcfg sysimgblt fb_sys_fops kvm_amd drm snd_hda_codec...

Hello all, I posted the whole disk encryption instructions in the forum that has been briefly discussed on the list. I joined the list per Ned's post on the thread. http://www.centos.org/modules/newbb/viewtopic.php?viewmode=flat&topic_id=15923&forum=42 I have a couple of questions about the process of creating a wiki. 1. How does the peer-review process work? 2. Is there a place

...R10: 0000000000000003 R11: 0000000000000246 R12: 00007fb65606f000 R13: 000000000000001a R14: 00007fb65604e870 R15: 00007fb65606a040 Modules linked in: nls_iso8859_1 nls_cp437 vfat fat usb_storage joydev tcp_diag inet_diag binfmt_misc netconsole configfs cfg80211 8021q veth sha256_generic libsha256 essiv authenc dm_crypt cpuid i2c_dev asus_atk0110 acpi_power_meter it87 hwmon_vid nouveau af_packet bridge video ttm drm_kms_helper stp snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic llc snd_hda_intel syscopyarea sysfillrect snd_intel_dspcfg sysimgblt fb_sys_fops kvm_amd drm snd_hda_codec...

On Sun, Nov 07 2010 at 6:05pm -0500, Andi Kleen <andi@firstfloor.org> wrote: > On Sun, Nov 07, 2010 at 10:39:23PM +0100, Milan Broz wrote: > > On 11/07/2010 08:45 PM, Andi Kleen wrote: > > >> I read about barrier-problems and data getting to the partition when > > >> using dm-crypt and several layers so I don''t know if that could be > >