]> www.infradead.org Git - mtd-utils.git/commitdiff
mkfs.ubifs: Use AES-256-XTS as default
authorRichard Weinberger <richard@nod.at>
Thu, 18 Oct 2018 14:37:18 +0000 (16:37 +0200)
committerDavid Oberhollenzer <david.oberhollenzer@sigma-star.at>
Thu, 1 Nov 2018 11:42:41 +0000 (12:42 +0100)
AES-128-CBC should only being used when 256-XTS is too slow
on low end hardware.

Signed-off-by: Richard Weinberger <richard@nod.at>
Signed-off-by: David Oberhollenzer <david.oberhollenzer@sigma-star.at>
ubifs-utils/mkfs.ubifs/mkfs.ubifs.c

index a60d392bbc81c25f1ecdf55cbb3995dfacb5337a..5847b352038a9b27b87f689c97792c7d3acb7e9b 100644 (file)
@@ -766,7 +766,7 @@ static int get_options(int argc, char**argv)
                c->encrypted = 1;
 
                if (cipher_name == NULL)
-                       cipher_name = "AES-128-CBC";
+                       cipher_name = "AES-256-XTS";
 
                root_fctx = init_fscrypt_context(cipher_name, fscrypt_flags,
                                                key_file, key_desc);