From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:42347) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1W60A9-000749-6U for qemu-devel@nongnu.org; Wed, 22 Jan 2014 10:56:26 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1W60A2-0005Yv-Ly for qemu-devel@nongnu.org; Wed, 22 Jan 2014 10:56:21 -0500 Received: from mx1.redhat.com ([209.132.183.28]:12407) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1W60A2-0005Ye-Dc for qemu-devel@nongnu.org; Wed, 22 Jan 2014 10:56:14 -0500 Message-ID: <52DFEA1A.2010109@redhat.com> Date: Wed, 22 Jan 2014 08:56:10 -0700 From: Eric Blake MIME-Version: 1.0 References: <1390405630-4288-1-git-send-email-berrange@redhat.com> In-Reply-To: <1390405630-4288-1-git-send-email-berrange@redhat.com> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="DxDKOTLFKMmEExe2ukw30ielM3BqLAUmg" Subject: Re: [Qemu-devel] [PATCH v3] Describe flaws in qcow/qcow2 encryption in the docs List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: "Daniel P. Berrange" , qemu-devel@nongnu.org Cc: Kevin Wolf , Paolo Bonzini , Markus Armbruster , Stefan Hajnoczi , Peter Maydell This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --DxDKOTLFKMmEExe2ukw30ielM3BqLAUmg Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On 01/22/2014 08:47 AM, Daniel P. Berrange wrote: > The qemu-img.texi / qemu-doc.texi files currently describe the > qcow2/qcow2 encryption thus >=20 > Recommend against any use of QCow/QCow2 encryption, directing > users to dm-crypt / LUKS which can meet modern cryptography > best practices. >=20 > Signed-off-by: Daniel P. Berrange > Reviewed-by: Markus Armbruster > --- > qemu-doc.texi | 23 ++++++++++++++++++++--- > qemu-img.texi | 23 ++++++++++++++++++++--- > 2 files changed, 40 insertions(+), 6 deletions(-) Reviewed-by: Eric Blake --=20 Eric Blake eblake redhat com +1-919-301-3266 Libvirt virtualization library http://libvirt.org --DxDKOTLFKMmEExe2ukw30ielM3BqLAUmg Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: Public key at http://people.redhat.com/eblake/eblake.gpg Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCAAGBQJS3+oaAAoJEKeha0olJ0Nqi4IH/3XRdkCkQjM06QKuKgXfAeHB 4h83yjeYmKKz8xZPLxAv2YHeGryUsGJJwuTEqga0yR5bKDjO3gnrJDqK69iA5mI8 Amq7KQLpA8gR8tJxP5daxcPJrf3kIGCdLIcaY6J1ndEmNZHTuHvgbxOXrr/gCJny d9Yq3DPA8cWst1FhXM8hh3DfVXLhP1dUwWH8Tvfjn4K4UrbgqgeHb+64odUrytqH Cu+4UK4s1S+2oHXI5ALMSqx34MBbZnYPb4KenvG6nh2BA1tNlNVnhxq697hMQ0Qt GHIWSA11iM3UnLeAwqdTT6F3GOu0lcdQsty3W8245DPw9GuJWW5sxbo0Kt6qa3k= =rqgE -----END PGP SIGNATURE----- --DxDKOTLFKMmEExe2ukw30ielM3BqLAUmg--