Ubuntu ZFS support in 19.10: introduction

This has been “fixed” in upstream ZOL, but Linus should be ashamed.

The linked article is a good example of where choosing a cipher such as ChaCha20-Poly1305 can be a fraction slower than AES but also more reliable and forward-compatible when CPU extensions are suddenly switched off. Imagine the not-too-distant future where a Spectre-like bug forces kernels to disable certain CPU extensions, and you suddenly find yourself stuck with mountains of data encrypted with the wrong cipher that only works safely and tolerably when hardware-accelerated.

Yes, though it’s a shame that ZFS native encryption doesn’t support multiple pass phrases/key files to unlock yet (the on disk structure does support this but the utilities don’t and won’t until a future release).

That’s the feature that keeps me tied to LUKS+zfs for now.