From owner-freebsd-hackers@FreeBSD.ORG Wed Jan 14 03:30:53 2015 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 0F3F6940; Wed, 14 Jan 2015 03:30:53 +0000 (UTC) Received: from mail-qa0-x232.google.com (mail-qa0-x232.google.com [IPv6:2607:f8b0:400d:c00::232]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id BBFB6A5A; Wed, 14 Jan 2015 03:30:52 +0000 (UTC) Received: by mail-qa0-f50.google.com with SMTP id k15so5097173qaq.9; Tue, 13 Jan 2015 19:30:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=V/qUu2d+VaKGMnVeYnl9rOGI/UiigUYj3x2NWfx8l00=; b=N5w3ln8Q6v6b2OxV7LWzKc4rlZ7pz2K2+GV4LDDPk8H/Ov1io8tMBq7xrzZZbAdhL4 XIgpK8dcL6bUTexMyn0MRMmatu3IJwc3XF7dXIVirhPhe5Z/wWLWT2m8PF6bRsTXwOco CpflyyoXR0XDwvLulJ96WjMYsNvMLjWvqdZCsdTM6knksl0si/w7r18+4YBzyH7DcY7X NZaJnqVNJzWRp89JeXiQ3ik8qI8P6GO6Xil4+3/uO4JE10RRo9awqxkIf6hRcL0DvUUA tUxODdrxDkGpYf8CJhSHppyJNquxtV0Snd/65b2jsh3cII3xvPA/0OmEouzzod/oYujB 0q1A== MIME-Version: 1.0 X-Received: by 10.224.26.4 with SMTP id b4mr3410263qac.26.1421206251865; Tue, 13 Jan 2015 19:30:51 -0800 (PST) Received: by 10.96.39.2 with HTTP; Tue, 13 Jan 2015 19:30:51 -0800 (PST) In-Reply-To: References: <54b33bfa.e31b980a.3e5d.ffffc823@mx.google.com> <54B4AE55.9090205@platinum.linux.pl> <54b5d299.4914980a.61cd.43a6@mx.google.com> Date: Wed, 14 Jan 2015 05:30:51 +0200 Message-ID: Subject: Re: ChaCha8/12/20 and GEOM ELI tests From: Kimmo Paasiala To: Rozhuk.IM@gmail.com Content-Type: text/plain; charset=UTF-8 Cc: FreeBSD Hackers , freebsd-geom@freebsd.org, Adam Nowacki X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Jan 2015 03:30:53 -0000 On Wed, Jan 14, 2015 at 5:21 AM, Kimmo Paasiala wrote: >> Depends on the capabilities of the attacker. >> >> To be able to continuously read encrypted sectors for data collection is too much. >> > > When talking about disk encryption the first assumption is that the > attacker always has this capability, even with so much power the > attacker shouldn't be able to break the encryption scheme. If he can > then the encryption scheme is not secure. > > -Kimmo Sorry pressed sent too fast. The last sentence should have been: Ift the attacker can learn anything about the unencrypted data or predict something about future encrypted or unencrypted blocks by analyzing the previous encrypted blocks the encryption scheme should be considered insecure. -Kimmo