Lainaus:

---

Tätä ei kuitenkaan pidetä erityisen ongelmallisena, sillä tilanteen todennäköisyys on hyvin alhainanen.

---

Lainaus, alkuperäisen viestin kirjoitti devilih:

---

Käyttää Electronic Codebook (ECB) modea joka ei tosiaan oo turvallinen jos salaat sillä c aseman...

---

Lainaus, alkuperäisen viestin kirjoitti devilih:

---

Eli siis tarkennuksena jos tekee containerin tai cryptaa sellasen levyn mistä minkään yksittäisen blockin sisältöä ei voi tietää ni truecrypt toimii ihan hyvin. Mutta ei jos salaa aseman jossa windows on koska windows tallentaa tiettyjä asioita tiettyihin blockkeihin aina jotka tiedetään jonka jälkee koko salaus murtuu. Kattelen täst ku ehin jonkun windows softan jolla voi turvallisesti cryptata windowssin ja laitan sen seuraavaan viestiin.

---

Lainaus, alkuperäisen viestin kirjoitti devilih:

---

Electronic Codebook (ECB) josta on muokattu
XEX-based tweaked-codebook mode with ciphertext stealing (XTS)
jota truecrypt esim käyttää

link

link

Tos on pari linkkii muualtakin löytyy hyvin tietoo asiasta.

---

Lainaus:

---

Data modification
A modern operating system has thousands of se
ttings that are important for the security
of the system. Each of these settings is an attack target. The attacker tries to find a block
of ciphertext that, when randomized, has a reasonable chance of
changing one such
setting to an insecure value. To change a valu
e in most data formats the 'header' has to be
left unchanged (as the software will perform
some consistency or sanity checks on the
header) but some of the contents has to be
changed. This requires th
at there is a block
boundary between the header and the contents
. Again, a larger block size significantly
increases the security in two ways. Ther
e are fewer block boundaries that can be
exploited, and randomizing a block damages
more of the overall data storage and
significantly increases the chance of triggeri
ng a software crash/failure, rather than
creating a security hole.

---

Lainaus, alkuperäisen viestin kirjoitti devilih:

---

Se eka osa puhuu siitä mut sit ku luet sitä erikseen xts kertovaa juttuu on xts ongelmista... lisääkin lähteitä on kyl mut sit teksti alkaa menee tosi tekniseks.

Lainaus ylemmästä linkistä

Lainaus:

---

Data modification
A modern operating system has thousands of se
ttings that are important for the security
of the system. Each of these settings is an attack target. The attacker tries to find a block
of ciphertext that, when randomized, has a reasonable chance of
changing one such
setting to an insecure value. To change a valu
e in most data formats the 'header' has to be
left unchanged (as the software will perform
some consistency or sanity checks on the
header) but some of the contents has to be
changed. This requires th
at there is a block
boundary between the header and the contents
. Again, a larger block size significantly
increases the security in two ways. Ther
e are fewer block boundaries that can be
exploited, and randomizing a block damages
more of the overall data storage and
significantly increases the chance of triggeri
ng a software crash/failure, rather than
creating a security hole.

---

---