From 5776c52bcf2b2b4b67e4cf1cc727d5d1e47b8140 Mon Sep 17 00:00:00 2001 From: Your Name Date: Tue, 11 May 2021 00:07:36 +0300 Subject: [PATCH] Add a note about CRC32 and other non-cryptographic checksums --- man/cryptsetup.8 | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/man/cryptsetup.8 b/man/cryptsetup.8 index 05ee1b7a..e8592a62 100644 --- a/man/cryptsetup.8 +++ b/man/cryptsetup.8 @@ -1722,7 +1722,10 @@ and for authentication). Both these keys are stored in one LUKS keyslot. \fBWARNING:\fR All support for authenticated modes is experimental and there are only some modes available for now. Note that there are a very few authenticated encryption algorithms that are suitable -for disk encryption. +for disk encryption. You also cannot use CRC32 or any other non-cryptographic +checksums (other than the special integrity mode "none"). If for some reason +you want to have integrity control without using authentication mode, then you +should separately configure dm-integrity independently of LUKS2. .SH NOTES ON LOOPBACK DEVICE USE Cryptsetup is usually used directly on a block device (disk