Re: kerneli blowfish/twofish compromised?

Colin Plumb (colin@nyx.net)
Tue, 24 Nov 1998 04:37:20 -0700 (MST)


On Mon, Nov 23, 1998 at 01:16:33PM +0100, Olaf Titz wrote:

> How would this work without extra storage for the IV?

And Chris Wedgewood replied:
> The IV could be a function of the block number and some secret.

Um, not good enough. The IV should involve some per-disk secret, just
on general principles, but it has to change every time the data in the
block changes, i.e. the IV for a particular block on a particular
drive using a particular key should not be fixed.

See the SFS docs for how to do it.

-- 
	-Colin

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/