docs: datas: enc: correct factual error -- no nonce involved there.

This commit is contained in:
Marian Beermann 2017-02-17 23:34:42 +01:00
parent e5bbba573a
commit 6b21d63086
1 changed files with 3 additions and 3 deletions

View File

@ -437,9 +437,9 @@ Encryption
.. seealso:: The :ref:`borgcrypto` section for an in-depth review. .. seealso:: The :ref:`borgcrypto` section for an in-depth review.
AES_-256 is used in CTR mode (so no need for padding). A 64bit initialization AES_-256 is used in CTR mode (so no need for padding). A 64 bit initialization
vector is used, a `HMAC-SHA256`_ is computed on the encrypted chunk with a vector is used, a `HMAC-SHA256`_ is computed on the encrypted chunk
random 64bit nonce and both are stored in the chunk. and both are stored in the chunk.
The header of each chunk is: ``TYPE(1)`` + ``HMAC(32)`` + ``NONCE(8)`` + ``CIPHERTEXT``. The header of each chunk is: ``TYPE(1)`` + ``HMAC(32)`` + ``NONCE(8)`` + ``CIPHERTEXT``.
Encryption and HMAC use two different keys. Encryption and HMAC use two different keys.