Playing with ZFS encryption on Linux

Re:Playing with ZFS encryption on Linux by cvwright on Tuesday June 20, 2017 @12:45PM (#14596147)

I'm not a cryptographer, but for your dedup version, you might want to consider using SIV mode [1,2]. It provides a well known, already vetted deterministic authenticated encryption, so you don't have to build your own from HMAC etc and then get it vetted.

[1] http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/propose...

[2] https://tools.ietf.org/html/rfc5297

[ Parent | on HN ]

Re:Playing with ZFS encryption on Linux by tcaputi on Friday June 23, 2017 @11:57AM (#14620086)

Thank you for the suggestion. As I said above, there is nothing preventing something like that from being implemented in ZFS in the future. Unfortunately, however, the encryption implementation uses a port of the Illumos Kernel Crypto Framework, which has not yet implemented an SIV mode.

As far as using our own HMAC goes we are using a standard SHA512-HMAC implementation which should be just as secure.

[ Parent | on HN ]