On Wed, 17 Sep 2025, Jeremie Courreges-Anglas wrote:

> Should vnconfig move from blowfish, it should probably be to a scheme
> actually designed for data storage like AES-XTS (like softraid CRYPTO)
> or similar.
> 
>   https://en.wikipedia.org/wiki/Disk_encryption_theory
> 
> I'm no crypto expert, but I doubt that moving from blowfish-CBC to
> AES-CBC would be a big win.

softraid already uses AES-XTS for encrypted volumes. IMO vnconfig
crypto is just legacy and should be removed.