diff options
Diffstat (limited to 'sys/contrib/openzfs/man/man8/zfs-load-key.8')
| -rw-r--r-- | sys/contrib/openzfs/man/man8/zfs-load-key.8 | 13 |
1 files changed, 8 insertions, 5 deletions
diff --git a/sys/contrib/openzfs/man/man8/zfs-load-key.8 b/sys/contrib/openzfs/man/man8/zfs-load-key.8 index ed89b65d7159..f68d6e985a78 100644 --- a/sys/contrib/openzfs/man/man8/zfs-load-key.8 +++ b/sys/contrib/openzfs/man/man8/zfs-load-key.8 @@ -6,7 +6,7 @@ .\" You may not use this file except in compliance with the License. .\" .\" You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE -.\" or http://www.opensolaris.org/os/licensing. +.\" or https://opensource.org/licenses/CDDL-1.0. .\" See the License for the specific language governing permissions .\" and limitations under the License. .\" @@ -200,7 +200,7 @@ if supported by your hardware, otherwise .Bl -tag -width "-r" .It Fl l Ensures the key is loaded before attempting to change the key. -This is effectively equivalent to runnin +This is effectively equivalent to running .Nm zfs Cm load-key Ar filesystem ; Nm zfs Cm change-key Ar filesystem .It Fl o Ar property Ns = Ns Ar value Allows the user to set encryption key properties @@ -236,7 +236,8 @@ Key rotation is managed by ZFS. Changing the user's key (e.g. a passphrase) does not require re-encrypting the entire dataset. Datasets can be scrubbed, -resilvered, renamed, and deleted without the encryption keys being loaded (see the +resilvered, renamed, and deleted without the encryption keys being loaded (see +the .Cm load-key subcommand for more info on key loading). .Pp @@ -291,9 +292,11 @@ Encrypted datasets may not have since the implementation stores some encryption metadata where the third copy would normally be. Since compression is applied before encryption, datasets may -be vulnerable to a CRIME-like attack if applications accessing the data allow for it. +be vulnerable to a CRIME-like attack if applications accessing the data allow +for it. Deduplication with encryption will leak information about which blocks -are equivalent in a dataset and will incur an extra CPU cost for each block written. +are equivalent in a dataset and will incur an extra CPU cost for each block +written. . .Sh SEE ALSO .Xr zfsprops 7 , |