From a1a20001233cda5b975c04640174ae2448fccf47 Mon Sep 17 00:00:00 2001 From: Rob Norris Date: Mon, 27 Feb 2023 13:32:25 +1100 Subject: [PATCH] zfsprops: add some guidance around choosing AES vs chapoly Signed-off-by: Rob Norris --- man/man7/zfsprops.7 | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/man/man7/zfsprops.7 b/man/man7/zfsprops.7 index 64c0a184677e..31492768127a 100644 --- a/man/man7/zfsprops.7 +++ b/man/man7/zfsprops.7 @@ -38,7 +38,7 @@ .\" Copyright (c) 2019, Kjeld Schouten-Lebbing .\" Copyright (c) 2022 Hewlett Packard Enterprise Development LP. .\" -.Dd April 18, 2023 +.Dd May 21, 2023 .Dt ZFSPROPS 7 .Os . @@ -1096,6 +1096,12 @@ selected, which is currently In order to provide consistent data protection, encryption must be specified at dataset creation time and it cannot be changed afterwards. .Pp +On systems lacking hardware-accelerated AES (many non-x86 boards) +.Sy chacha20-poly1305 +will usually offer better performance without compromising security. +On x86, or when datasets may be mounted on on older versions of ZFS, an AES +suite is the best choice. +.Pp For more details and caveats about encryption see the .Sx Encryption section of