From a3a549320ff3bde73346e2f887a5cdcbcb757e12 Mon Sep 17 00:00:00 2001 From: Milan Broz Date: Tue, 24 May 2011 11:59:55 +0000 Subject: [PATCH] Suggest aes-xts-plain64 in man page. git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@534 36d66b0a-2a48-0410-832c-cd162a569da5 --- man/cryptsetup.8 | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/man/cryptsetup.8 b/man/cryptsetup.8 index b0c55900..18ca6032 100644 --- a/man/cryptsetup.8 +++ b/man/cryptsetup.8 @@ -226,12 +226,11 @@ you can see compiled-in default using \fIcryptsetup \-\-help\fR. If not changed, the default is for plain dm-crypt and LUKS mappings "aes-cbc-essiv:sha256". -For pre-2.6.10 kernels, use "aes-plain" as they don't understand -the new cipher spec strings. To use ESSIV, use "aes-cbc-essiv:sha256". - For XTS mode, kernel version 2.6.24 or more recent is required. -Use "aes-xts-plain" cipher specification and set key size to 256 +Use "aes-xts-plain64" cipher specification and set key size to 256 (or 512) bits (see \-s option). +Note that plain64 IV (Initialization Vector) is available since kernel version 2.6.33 +and it is full 64bit version of plain IV. For more info please see FAQ. .TP .B "\-\-verify-passphrase, \-y" query for passwords twice. Useful when creating a (regular) mapping