Re: brute-force attacks on cryptoloop or loop-AES

[Jari Ruusu <jari.ruusu@pp.inet.fi>]

Newsmail wrote:
> what do you mean by 'Total CPU time does not increase for just one
> filesystem.'?

If attacker attempts to crack one encrypted filesystem with or without -S
option, he has to:

1)  Compute passphrase hash values for every passphrase in dictionary.
2)  Try each hash for filesystem

Without -S option, attacker can use CPU cycles to compute step 1 in advance,
but that does not decrease the total amount of CPU cycles he has to spend.
-S option only time-shifts the earliest time _when_ those CPU cycles need to
be used.

Regards,
Jari Ruusu <jari.ruusu@pp.inet.fi>

-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/