diff options
Diffstat (limited to 'man/man8/zfs-load-key.8')
-rw-r--r-- | man/man8/zfs-load-key.8 | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/man/man8/zfs-load-key.8 b/man/man8/zfs-load-key.8 index b12a79e0150a..f68d6e985a78 100644 --- a/man/man8/zfs-load-key.8 +++ b/man/man8/zfs-load-key.8 @@ -6,7 +6,7 @@ .\" You may not use this file except in compliance with the License. .\" .\" You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE -.\" or http://www.opensolaris.org/os/licensing. +.\" or https://opensource.org/licenses/CDDL-1.0. .\" See the License for the specific language governing permissions .\" and limitations under the License. .\" @@ -236,7 +236,8 @@ Key rotation is managed by ZFS. Changing the user's key (e.g. a passphrase) does not require re-encrypting the entire dataset. Datasets can be scrubbed, -resilvered, renamed, and deleted without the encryption keys being loaded (see the +resilvered, renamed, and deleted without the encryption keys being loaded (see +the .Cm load-key subcommand for more info on key loading). .Pp @@ -291,9 +292,11 @@ Encrypted datasets may not have since the implementation stores some encryption metadata where the third copy would normally be. Since compression is applied before encryption, datasets may -be vulnerable to a CRIME-like attack if applications accessing the data allow for it. +be vulnerable to a CRIME-like attack if applications accessing the data allow +for it. Deduplication with encryption will leak information about which blocks -are equivalent in a dataset and will incur an extra CPU cost for each block written. +are equivalent in a dataset and will incur an extra CPU cost for each block +written. . .Sh SEE ALSO .Xr zfsprops 7 , |