[dm-crypt] Reconsidering default options for cryptsetup-reencrypt

Milan Broz gmazyland at gmail.com
Sat Nov 24 21:59:14 CET 2012


On 11/24/2012 06:01 PM, Sven Eschenberg wrote:

> BTW, what exactly are you referring to, when you talk about 64 MB blocksize?

Here cryptsetup-reencrypt is in principle simple program, it reads a "block"
and write it back to device with new encryption parameters (and optionally with
some different offset). So block here is meant as an unit which is handled in one
reencryption step.
(But the real atomic unit of encryption is still 512B block of course.)

There is no requirement this block to be aligned to underlying hw alignment
(but if it is misaligned, the same performance degradation problems apply of course).

Milan


More information about the dm-crypt mailing list