From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from moutng.kundenserver.de (moutng.kundenserver.de [212.227.17.8]) by mail.saout.de (Postfix) with ESMTP for ; Mon, 31 Aug 2009 12:33:57 +0200 (CEST) Date: Mon, 31 Aug 2009 12:38:50 +0200 From: Heinz Diehl Message-ID: <20090831103850.GA7956@fancy-poultry.org> References: <200908291558.58894.dmcryptmailman@strokerville.com> <87hbvp33pc.wl%htd@fancy-poultry.org> <200908301654.55335.test532@codingninjas.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200908301654.55335.test532@codingninjas.org> Subject: Re: [dm-crypt] Random fill List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt@saout.de On 31.08.2009, test532@codingninjas.org wrote: > I agree with Rick that one should use /dev/urandom (instead of encryption) due > to the enabling of known plaintext attacks Known plaintext attacks on what? On a bunch of zeroes? After overwriting the whole partition using dmcrypt via /dev/zero, the random key used will be deleted irrevocably, and the partition gets a brand new setup of LUKS/dmcrypt, and it gets partially filled with "real" data. You haven't even to use the same algorithm, hash or whatever. How should this lead to a significantly better situation to attack the key/ciphertext?