[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Cryptoloop hvr issues?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 02/17/2006 03:51 AM, Nandan S wrote:
| Hi,
| I need to add cryptoloop support to the 2.4.31 kernel. I'm planning
| to use the hvr patch, since the hvr patch would mean minimal changes to
| our custom kernel code. But I see that most of the distributions
| (openwall/debian/gentoo) have chosen the jari patch, and the hvr patch
| seems to be unmaintained. Is the hvr patch obsolete or are there any
| known issues with it?
| Really appreciate any help,
| NAndan
As I have posted recently:
Cryptoloop implements single key disk crypto that is fubar and the second
implements multi-key crypto that is not vulnerable to the watermark attack.
See: http://mareichelt.de/pub/texts.cryptoloop.php
and from google:
http://marc.theaimsgroup.com/?l=linux-kernel&m=107719798631935&w=2
http://www.governmentsecurity.org/archive/t14922.html
So use loop-aes. I'm waiting for the day when the kernel developers drop
cryptoloop and put in loop-aes, but I'm not holding my breath.
Cheers,
- ---Venkat.
- --
http://rayservers.com/ 607-546-7300
PGP/GPG: https://rayservers.com/keys/0x12430522.asc
Skype: rayservers GDCA: http://www.gdcaonline.org/members/rayservers.htm
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iD8DBQFD9b11WdkW/RJDBSIRAtoyAJ9ENkCClbkfckWENunX8Gi3DnaJugCdHeNf
aILbqj9qUo/1VVQQkUsLt9Y=
=8uzw
-----END PGP SIGNATURE-----
-
Linux-crypto: cryptography in and on the Linux system
Archive: http://mail.nl.linux.org/linux-crypto/