Change LUKS default cipher to aes-xts-plain64 (AES128-XTS).

diff --git a/configure.ac b/configure.ac
index f2f86e6..d07a04a 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -385,7 +385,7 @@ CS_NUM_WITH([plain-keybits],[key length in bits for plain mode], [256])
 
 CS_STR_WITH([luks1-hash],   [hash function for LUKS1 header], [sha1])
 CS_STR_WITH([luks1-cipher], [cipher for LUKS1], [aes])
 
 CS_STR_WITH([luks1-hash],   [hash function for LUKS1 header], [sha1])
 CS_STR_WITH([luks1-cipher], [cipher for LUKS1], [aes])

-CS_STR_WITH([luks1-mode],   [cipher mode for LUKS1], [cbc-essiv:sha256])
+CS_STR_WITH([luks1-mode],   [cipher mode for LUKS1], [xts-plain64])

 CS_NUM_WITH([luks1-keybits],[key length in bits for LUKS1], [256])
 CS_NUM_WITH([luks1-iter-time],[PBKDF2 iteration time for LUKS1 (in ms)], [1000])
 
 CS_NUM_WITH([luks1-keybits],[key length in bits for LUKS1], [256])
 CS_NUM_WITH([luks1-iter-time],[PBKDF2 iteration time for LUKS1 (in ms)], [1000])