mirror of https://github.com/borgbackup/borg.git
docs: init: fix markup/typos
This commit is contained in:
parent
f6732b62fd
commit
497da8df04
|
@ -1765,32 +1765,33 @@ class Archiver:
|
|||
Encryption modes
|
||||
++++++++++++++++
|
||||
|
||||
repokey and keyfile use AES-CTR-256 for encryption and HMAC-SHA256 for
|
||||
`repokey` and `keyfile` use AES-CTR-256 for encryption and HMAC-SHA256 for
|
||||
authentication in an encrypt-then-MAC (EtM) construction. The chunk ID hash
|
||||
is HMAC-SHA256 as well (with a separate key).
|
||||
These modes are compatible with borg 1.0.x.
|
||||
|
||||
repokey-blake2 and keyfile-blake2 are also authenticated encryption modes,
|
||||
`repokey-blake2` and `keyfile-blake2` are also authenticated encryption modes,
|
||||
but use BLAKE2b-256 instead of HMAC-SHA256 for authentication. The chunk ID
|
||||
hash is a keyed BLAKE2b-256 hash.
|
||||
These modes are new and not compatible with borg 1.0.x.
|
||||
These modes are new and *not* compatible with borg 1.0.x.
|
||||
|
||||
"authenticated" mode uses no encryption, but authenticates repository contents
|
||||
`authenticated` mode uses no encryption, but authenticates repository contents
|
||||
through the same keyed BLAKE2b-256 hash as the other blake2 modes (it uses it
|
||||
as chunk ID hash). The key is stored like repokey.
|
||||
This mode is new and not compatible with borg 1.0.x.
|
||||
|
||||
"none" mode uses no encryption and no authentication. It uses sha256 as chunk
|
||||
`none` mode uses no encryption and no authentication. It uses sha256 as chunk
|
||||
ID hash. Not recommended, rather consider using an authenticated or
|
||||
authenticated/encrypted mode.
|
||||
This mode is compatible with borg 1.0.x.
|
||||
|
||||
Hardware acceleration will be used automatically.
|
||||
|
||||
On modern Intel/AMD CPUs (except very cheap ones), AES is usually hw
|
||||
accelerated. BLAKE2b is faster than sha256 on Intel/AMD 64bit CPUs.
|
||||
On modern Intel/AMD CPUs (except very cheap ones), AES is usually
|
||||
hardware-accelerated. BLAKE2b is faster than SHA256 on Intel/AMD 64bit CPUs,
|
||||
which makes `authenticated` faster than `none`.
|
||||
|
||||
On modern ARM CPUs, NEON provides hw acceleration for sha256 making it faster
|
||||
On modern ARM CPUs, NEON provides hardware acceleration for SHA256 making it faster
|
||||
than BLAKE2b-256 there.
|
||||
""")
|
||||
subparser = subparsers.add_parser('init', parents=[common_parser], add_help=False,
|
||||
|
@ -1804,7 +1805,7 @@ class Archiver:
|
|||
subparser.add_argument('-e', '--encryption', dest='encryption',
|
||||
choices=('none', 'keyfile', 'repokey', 'keyfile-blake2', 'repokey-blake2', 'authenticated'),
|
||||
default=None,
|
||||
help='select encryption key mode (default: "%(default)s")')
|
||||
help='select encryption key mode')
|
||||
subparser.add_argument('-a', '--append-only', dest='append_only', action='store_true',
|
||||
help='create an append-only mode repository')
|
||||
|
||||
|
|
Loading…
Reference in New Issue