From 38bfd8162fa3f6a5b9a4a95d22c5b848a85f50af Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Thu, 24 Dec 2020 22:55:21 -0500 Subject: [PATCH] device encryption -> global encryption for clarity --- static/faq.html | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/static/faq.html b/static/faq.html index e2a82b22..dd3bd15e 100644 --- a/static/faq.html +++ b/static/faq.html @@ -336,10 +336,10 @@

File data is encrypted with AES-256-XTS and file names with AES-256-CTS. A unique key is derived using HKDF-SHA512 for each regular file, directory and - symbolic link from the per-profile encryption keys, or the device encryption + symbolic link from the per-profile encryption keys, or the global encryption key for non-sensitive data stored outside of profiles. The directory key is used to encrypt the file names. GrapheneOS increases the file name padding - from 16 bytes to 32 bytes. AES-256-XTS with the device encryption key is also + from 16 bytes to 32 bytes. AES-256-XTS with the global encryption key is also used to encrypt filesystem metadata as a whole beyond the finer-grained file name encryption.