Comment 13 for bug 1857398

> I would recommend setting encryption=aes256-gcm instead of
> encryption=on (which is aes256-ccm).

I think the right way to handle this is to change the behavior of zfs-linux so that encryption=on defaults to the recommended algorithm - rather than hard-coding the algorithm selection in ubiquity, which is generally speaking a good recipe for bit rot.