Header
2 bytes header version (big endian uint16, currently 2)
16 bytes file id
Data block, default AES-GCM mode
16 bytes GCM IV (nonce)
1-4096 bytes encrypted data
16 bytes GHASH
Data block, AES-SIV mode (used in reverse mode, or when explicitly enabled with -init -aessiv
)
16 bytes nonce
16 bytes SIV
1-4096 bytes encrypted data
Data block, XChaCha20-Poly1305 (enabled via -init -xchacha
)
24 bytes nonce
1-4096 bytes encrypted data
16 bytes Poly1305 tag
Full block overhead (AES-GCM and AES-SIV mode) = 32/4096 = 1/128 = 0.78125 %
Full block overhead (XChaCha20-Poly1305 mode) = 40/4096 = ~1 %
Header 18 bytes
Data block 33 bytes
Total: 51 bytes
Header 18 bytes
Data block 4128 bytes
Data block 936 bytes
Total: 5082 bytes
Header 18 bytes
Data block 41 bytes
Total: 59 bytes
Header 18 bytes
Data block 4136 bytes
Data block 944 bytes
Total: 5098 bytes