Page 1 of 1

default luks encryption format

PostPosted: Aug 15th, '23, 15:11
by nexus
Hello, someone know why mga9 use benbi initialization vector instead plain64 by default for encrypting disk?

Re: default luks encryption format

PostPosted: Aug 15th, '23, 17:22
by doktor5000
Hi there,
just checked the package and there's nothing relevant that we're changing about the default settings.
See http://svnweb.mageia.org/packages/cauld ... arkup#l101

Also, are you asking about creating encrpyted filesystems via diskdrake or manually via LUKS ?
And why do you suggest it should be plain64 as initialisation vector?

Re: default luks encryption format

PostPosted: Aug 15th, '23, 21:08
by nexus
are you asking about creating encrpyted filesystems via diskdrake

yes, diskdrake use benbi. Manually, via cryptsetup (luks), I can choice and on mga5 I had a chosen "plain" initialization vector.
According to the information I found, the difference between them is that "benbi" uses "big-endian" and "plain"/"plain64" uses "little-endian" bytes order.
Intel and AMD processors uses little-endian byte order so maybe work faster with luks encryption plain initialization vector. But maybe there are other reasons, e.g. better safety to use "benbi".