3 ms·

I'm not a cryptographer, but for your dedup version, you might want to consider using SIV mode [1,2]. It provides a well known, already vetted deterministic au

I'm not a cryptographer, but for your dedup version, you might want to consider using SIV mode [1,2]. It provides a well known, already vetted deterministic authenticated encryption, so you don't have to build your own from HMAC etc and then get it vetted. [1] http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/proposedmodes/siv/siv.pdf http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/propose... [2] https://tools.ietf.org/html/rfc5297 https://tools.ietf.org/html/rfc5297

tcaputi 9y ago
Thank you for the suggestion. As I said above, there is nothing preventing something like that from being implemented in ZFS in the future. Unfortunately, however, the encryption implementation uses a port of the Illumos Kernel Crypto Framework, which has not yet implemented an SIV mode. As far as using our own HMAC goes we are using a standard SHA512-HMAC implementation which should be just as secure.