1105513Sphk# $FreeBSD: releng/10.3/sbin/gbde/template.txt 105513 2002-10-20 11:16:13Z phk $ 2105513Sphk# 3105513Sphk# Sector size is the smallest unit of data which can be read or written. 4105513Sphk# Making it too small decreases performance and decreases available space. 5105513Sphk# Making it too large may prevent filesystems from working. 512 is the 6105513Sphk# minimum and always safe. For UFS, use the fragment size 7105513Sphk# 8105513Sphksector_size = 512 9105513Sphk 10105513Sphk# 11105513Sphk# Start and end of the encrypted section of the partition. Specify in 12105513Sphk# sector numbers. If none specified, "all" will be assumed, to the 13105513Sphk# extent the value of this can be established. 14105513Sphk# 15105513Sphk#first_sector = 0 16105513Sphk#last_sector = 2879 17105513Sphk#total_sectors = 2880 18105513Sphk 19105513Sphk# 20105513Sphk# An encrypted partition can have more than one key. It may be a good idea 21105513Sphk# to make at least two keys, and save one of them for "just in case" use. 22105513Sphk# The minimum is obviously one and the maximum is 4. 23105513Sphk# 24105513Sphknumber_of_keys = 4 25105513Sphk 26105513Sphk# 27105513Sphk# Flushing the partition with random bytes prevents a brute-force attack 28105513Sphk# from skipping sectors which obviously contains un-encrypted data. 29105513Sphk# NB: This variable is boolean, if it is present it means "yes" even if 30105513Sphk# you set it to the value "no" 31105513Sphk# 32105513Sphk#random_flush = 33