GELI encryption options

[herklots]

I don't see any way of setting the encryption tradeoffs that GELI allows... adding verification, setting encryption algorithm.

What are the defaults, how can that be cehcked, and can they be changed?

 

[dlavigne]

They can be checked with "geli list". Any desired editable settings should be requested as a feature enhancement using support.freenas.org.

 

[herklots]

Can you please advise:
1. what the fixed encryption settings,
2. how secure they are against attack, and
3. the reasons for those choices?