From owner-freebsd-questions@FreeBSD.ORG Thu Jul 26 20:58:36 2012 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 187E1106564A for ; Thu, 26 Jul 2012 20:58:36 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: from mail-wi0-f170.google.com (mail-wi0-f170.google.com [209.85.212.170]) by mx1.freebsd.org (Postfix) with ESMTP id 98DB18FC08 for ; Thu, 26 Jul 2012 20:58:35 +0000 (UTC) Received: by wibhq12 with SMTP id hq12so106276wib.1 for ; Thu, 26 Jul 2012 13:58:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20120113; h=date:from:to:subject:message-id:in-reply-to:references:x-mailer :mime-version:content-type:content-transfer-encoding; bh=c/KSrDL73Q0foc0s9eGPJXdSNCK2+sAXzNXKMcWDOrs=; b=sjY6SWEP9dv5Lxvd6bocUeuIoy5N0O7xjMnXyQeT4ajLdo4PHaJuA9BCaiTo1agsv0 aoc/1FIgj9cD5B+CZPSnkCRt0Ep2kbqs6ItXLRg6cNhXYANuX0aGZAOcuWHZKnxmV+/0 jGd3PvJe/NOE7ilSwC/AaRGhsxW/qhXe6NqF3Ghbm4eezF+PkkTEjaoLvR2r8xZn8hfC QbjgBwn1Ta2t0lERwDV6E5Nux35v2tZzzCq+15JcQnH9V3bXKJSJlpZnPKSQkwjUAgQD 5GdLFIRYbKeEzEFDer3lbq9QF1mHAiorMmXbncSv1FHqnF3cdxROkbrPpGDgbz6KV3OE 6YCQ== Received: by 10.180.90.195 with SMTP id by3mr478395wib.7.1343336314601; Thu, 26 Jul 2012 13:58:34 -0700 (PDT) Received: from gumby.homeunix.com (87-194-105-247.bethere.co.uk. [87.194.105.247]) by mx.google.com with ESMTPS id w7sm10154553wiz.0.2012.07.26.13.58.32 (version=SSLv3 cipher=OTHER); Thu, 26 Jul 2012 13:58:33 -0700 (PDT) Date: Thu, 26 Jul 2012 21:58:30 +0100 From: RW To: freebsd-questions@freebsd.org Message-ID: <20120726215830.3ab6e178@gumby.homeunix.com> In-Reply-To: <20120726154900.2f777b04@fabiankeil.de> References: <201207260052.q6Q0qdss086796@mail.r-bonomi.com> <20120726031450.5c06dd61@gumby.homeunix.com> <20120726154900.2f777b04@fabiankeil.de> X-Mailer: Claws Mail 3.8.1 (GTK+ 2.24.6; amd64-portbld-freebsd8.3) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Subject: Re: geli - selecting cipher X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Jul 2012 20:58:36 -0000 On Thu, 26 Jul 2012 15:49:00 +0200 Fabian Keil wrote: > RW wrote: > > In the end I went with 128 bit aes-cbc since it's the fastest > > setting and Bruce Schneier recommends 128 over 256 AES as being > > more secure. > > Can you provide the source for the "as being more secure" part? More likely to remain secure, if you prefer.