Re: partially encrypted filesystem
From: David Wagner
Date: Thu Dec 04 2003 - 14:22:36 EST
Jörn Engel wrote:
>Depends on how much security you really care about. If you really
>don't mind the pain involved, some metadata should explicitly *not* be
>encrypted, to avoid known plaintext attacks.
What? No. Modern cryptosystems are designed to be secure against
known plaintext attacks. Making your system more convoluted merely to
avoid providing known plaintext is a lousy design approach: the extra
complexity usually adds more risk than it removes.
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/