[H-GEN] File system encryption

[Jason Parker-Burlingham]

[ Humbug *General* list - semi-serious discussions about Humbug and     ]
[ Unix-related topics. Posts from non-subscribed addresses will vanish. ]

Lance Edwards <lanceedwards at optushome.com.au> writes:

> A quick setup for a loop encrypted FS, see the link below but change
> xor to aes / aes128 / aes192 or aes256 for the argument passed to
> losetup (for increased security). Worked perfectly on my mandrake
> 9.1 installation.
> http://www.ncl.ac.uk/ucs/linux/encrypt.html

Goodness!  Why on earth are they suggesting that people use XOR
encryption?  It would be okay if they were using a one-time-pad or
something[1] but I see no evidence of that.  XOR encryption is
trivially broken.

jason, tsk, not even a warning on the page

[1] : I wonder how useful that would be for a filesystem, though;
      650MB of random bits has to be tough to come by[2].

[2] : Although I occasionally think of getting a very large collection
      of casino dice and setting aside about a week...
-- 
Stay up-to-date on what I'm doing lately:
                                 http://www.netacc.net/~burlingham

--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.  See http://www.humbug.org.au/