From 24bb28a517b1500bc1f5355083d68a152c6e7e96 Mon Sep 17 00:00:00 2001 From: Jakob Unterwurzacher Date: Tue, 24 Aug 2021 14:05:52 +0200 Subject: [PATCH] MANPAGE: add -xchacha --- Documentation/MANPAGE.md | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/Documentation/MANPAGE.md b/Documentation/MANPAGE.md index 6cbf9d4..b9aa51b 100644 --- a/Documentation/MANPAGE.md +++ b/Documentation/MANPAGE.md @@ -100,9 +100,11 @@ Available options for `-init` are listed below. Usually, you don't need any. Defaults are fine. #### -aessiv -Use the AES-SIV encryption mode. This is slower than GCM but is +Use the AES-SIV encryption mode. This is slower than AES-GCM but is secure with deterministic nonces as used in "-reverse" mode. +Run `gocryptfs -speed` to find out if and how much slower. + #### -deterministic-names Disable file name randomisation and creation of `gocryptfs.diriv` files. This can prevent sync conflicts conflicts when synchronising files, but @@ -142,6 +144,12 @@ Setting this to a lower value speeds up mounting and reduces its memory needs, but makes the password susceptible to brute-force attacks. The default is 16. +#### -xchacha +Use XChaCha20-Poly1305 file content encryption. This should be much faster +than AES-GCM on CPUs that lack AES acceleration. + +Run `gocryptfs -speed` to find out if and how much faster. + MOUNT OPTIONS =============