From 0edfeb19f1f09234fbf9a3e5dd2fa9ee4ee3fa51 Mon Sep 17 00:00:00 2001 From: Arno Wagner Date: Tue, 12 Jan 2021 12:14:27 +0000 Subject: [PATCH] Update FAQ: Clarified statement about block sizes in 5.16 --- FAQ | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/FAQ b/FAQ index 16842205..d829ad35 100644 --- a/FAQ +++ b/FAQ @@ -1608,8 +1608,9 @@ A. Contributors cryptsetup -c aes-xts-plain64 luksFormat - There is a potential security issue with XTS mode and large blocks. - LUKS and dm-crypt always use 512B blocks and the issue does not apply. + There is a potential security issue with XTS mode and blocks larger + than 2^20 bytes or so. LUKS and dm-crypt always use smaller blocks + and the issue does not apply. * 5.17 Is LUKS FIPS-140-2 certified?