zfsprops: add some guidance around choosing AES vs chapoly

Signed-off-by: Rob Norris <[email protected]>
openzfs · Mar 8, 2023 · 85fde7f · 85fde7f
1 parent 59a930e
commit 85fde7f
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/man/man7/zfsprops.7 b/man/man7/zfsprops.7
@@ -1094,6 +1094,12 @@ selected, which is currently
 In order to provide consistent data protection, encryption must be specified at
 dataset creation time and it cannot be changed afterwards.
 .Pp
+On systems lacking hardware-accelerated AES (many non-x86 boards)
+.Sy chacha20-poly1305
+will usually offer better performance without compromising security.
+On x86, or when datasets may be mounted on on older versions of ZFS, an AES
+suite is the best choice.
+.Pp
 For more details and caveats about encryption see the
 .Sx Encryption
 section of