[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: SuSE 10.2 and LOADNATIONALKEYB=1

Florian Reitmeir wrote:
> Just use dmcrypt and/or LUKS both are in the standard Kernel

dm-crypt has not caught up with loop-AES yet. dm-crypt lacks countermeasures
against leaking changed plaintext location. dm-crypt lacks countermeasures
against key leaks by allowing DRAM cells to develop detectable property. For
more info see http://www.cypherpunks.to/~peter/usenix01.pdf and loop-AES'
KEYSCRUB=y build option.

Peter's problem is incompatible character encodings. He insists on using
passphrase characters that have different encodings under different setups.

-- 
Jari Ruusu  1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9  DB 1D EB E3 24 0E A9 DD

-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/