Clarify GELI AES default keysize and that the defaults are probably fine.

PR: 201979
Submitted by: Tom "Ludensen" Christensen
This commit is contained in:
Dru Lavigne 2015-10-01 09:42:40 +00:00
parent 4525e15666
commit ca92ab5415
Notes: svn2git 2020-12-08 03:00:23 +00:00
svn path=/head/; revision=47461

View file

@ -2905,7 +2905,8 @@ geli_da2_flags="-p -k /root/<replaceable>da2.key</replaceable>"</programlisting>
/dev/ada0s1b.eli none swap sw 0 0</programlisting>
<para>By default, &man.geli.8; uses the <acronym>AES</acronym>
algorithm with a key length of 256 bits. These defaults can
algorithm with a key length of 128 bits. Normally the default
settings will suffice. However, if desired these defaults can
be altered in the options field in
<filename>/etc/fstab</filename>. The possible flags
are:</para>