Block Storage API V3 (CURRENT) in cinder - remove Optional flag for key_size and cipher
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Cinder |
Confirmed
|
Low
|
Unassigned | ||
Bug Description
Regarding https:/
encrypted volume type without a cipher accepted but will fail to create
an encrypted volume - we should update the documentation.
For key-size, you can use 128 bit (e.g. AES-128 with CBC), 256 bit
(e.g. AES-256 with CBC) or 512 bit (e.g. AES-256 with XTS mode). You
can do 64 bit (e.g. blowfish-64 with CBC), but anything below 128 bit
has to be considered insecure today. Maybe we can set a default to 256.
This bug tracker is for errors with the documentation, use the following as a template and remove or add fields as you see fit. Convert [ ] into [x] to check boxes:
- [X] This doc is inaccurate in this way: ______
- [ ] This is a doc addition request.
- [ ] I have a fix to the document that I can paste below including example: input and output.
If you have a troubleshooting or support issue, use the following resources:
- The mailing list: https:/
- IRC: 'openstack' channel on Freenode
-------
Release: on 2021-05-25 19:08:09
SHA: da2fbff247f23c7
Source: https:/
URL: https:/
| tags: | added: documentation encryption |
| Changed in cinder: | |
| importance: | Undecided → Medium |
| Changed in cinder: | |
| assignee: | nobody → Sofia Enriquez (lsofia-enriquez) |
| Changed in cinder: | |
| importance: | Medium → Low |
| Changed in cinder: | |
| assignee: | Sofia Enriquez (lsofia-enriquez) → nobody |
| status: | In Progress → Confirmed |

Fix proposed to branch: master /review. opendev. org/c/openstack /cinder/ +/795669
Review: https:/