3 ms·
Excellent article just posted in the thread about OpenBSD disk encryption that explains why existing disk encryption schemes suck: http://sockpuppet.org/blog/2
by koverstreet 10y ago
Excellent article just posted in the thread about OpenBSD disk encryption that explains why existing disk encryption schemes suck:
http://sockpuppet.org/blog/2014/04/30/you-dont-want-xts/ http://sockpuppet.org/blog/2014/04/30/you-dont-want-xts/
This really explains the motivations for bcachefs's encryption - in the filesystem, if we're taking encryption into account in the design, we can incorporate MACs and nonces.