Block Storage API V3 (CURRENT) in cinder - remove Optional flag for key_size and cipher
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Cinder |
Confirmed
|
Low
|
Unassigned |
Bug Description
Regarding https:/
encrypted volume type without a cipher accepted but will fail to create
an encrypted volume - we should update the documentation.
For key-size, you can use 128 bit (e.g. AES-128 with CBC), 256 bit
(e.g. AES-256 with CBC) or 512 bit (e.g. AES-256 with XTS mode). You
can do 64 bit (e.g. blowfish-64 with CBC), but anything below 128 bit
has to be considered insecure today. Maybe we can set a default to 256.
This bug tracker is for errors with the documentation, use the following as a template and remove or add fields as you see fit. Convert [ ] into [x] to check boxes:
- [X] This doc is inaccurate in this way: ______
- [ ] This is a doc addition request.
- [ ] I have a fix to the document that I can paste below including example: input and output.
If you have a troubleshooting or support issue, use the following resources:
- The mailing list: https:/
- IRC: 'openstack' channel on Freenode
-------
Release: on 2021-05-25 19:08:09
SHA: da2fbff247f23c7
Source: https:/
URL: https:/
tags: | added: documentation encryption |
Changed in cinder: | |
importance: | Undecided → Medium |
Changed in cinder: | |
assignee: | nobody → Sofia Enriquez (lsofia-enriquez) |
Changed in cinder: | |
importance: | Medium → Low |
Changed in cinder: | |
assignee: | Sofia Enriquez (lsofia-enriquez) → nobody |
status: | In Progress → Confirmed |
Fix proposed to branch: master /review. opendev. org/c/openstack /cinder/ +/795669
Review: https:/