From: Richard Weinberger <richard@nod.at>
Date: Thu, 18 Oct 2018 14:37:18 +0000 (+0200)
Subject: mkfs.ubifs: Use AES-256-XTS as default
X-Git-Tag: v2.1.0~8
X-Git-Url: https://www.infradead.org/git/?a=commitdiff_plain;h=dd0d9c623e22;p=mtd-utils.git

mkfs.ubifs: Use AES-256-XTS as default

AES-128-CBC should only being used when 256-XTS is too slow
on low end hardware.

Signed-off-by: Richard Weinberger <richard@nod.at>
Signed-off-by: David Oberhollenzer <david.oberhollenzer@sigma-star.at>
---

diff --git a/ubifs-utils/mkfs.ubifs/mkfs.ubifs.c b/ubifs-utils/mkfs.ubifs/mkfs.ubifs.c
index a60d392..5847b35 100644
--- a/ubifs-utils/mkfs.ubifs/mkfs.ubifs.c
+++ b/ubifs-utils/mkfs.ubifs/mkfs.ubifs.c
@@ -766,7 +766,7 @@ static int get_options(int argc, char**argv)
 		c->encrypted = 1;
 
 		if (cipher_name == NULL)
-			cipher_name = "AES-128-CBC";
+			cipher_name = "AES-256-XTS";
 
 		root_fctx = init_fscrypt_context(cipher_name, fscrypt_flags,
 						key_file, key_desc);