From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <wagner@tansi.org>
Received: from tansi.org (ns.km10532-04.keymachine.de [87.118.102.195])
 by mail.saout.de (Postfix) with ESMTP
 for <dm-crypt@saout.de>; Thu, 30 Dec 2010 13:27:17 +0100 (CET)
Received: from gatewagner.dyndns.org (84-74-164-239.dclient.hispeed.ch
 [84.74.164.239]) by tansi.org (Postfix) with ESMTPA id 3B556121837F
 for <dm-crypt@saout.de>; Thu, 30 Dec 2010 13:27:16 +0100 (CET)
Date: Thu, 30 Dec 2010 13:27:15 +0100
From: Arno Wagner <arno@wagner.name>
Message-ID: <20101230122715.GA29837@tansi.org>
References: <1293466212.4d18ba64b28dc@www.inmano.com>
 <20101227215200.GA6681@tansi.org> <1293524963.4d199fe3b7cb1@www.inmano.com>
 <4D19C3FE.1000100@redhat.com> <1293545117.4d19ee9d718e5@www.inmano.com>
 <4D1A3F2E.8040505@redhat.com> <1293703878.4d1c5ac6e8f21@www.inmano.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <1293703878.4d1c5ac6e8f21@www.inmano.com>
Subject: Re: [dm-crypt] using a salt for encrypting blocks
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: dm-crypt@saout.de

On Thu, Dec 30, 2010 at 11:11:18AM +0100, octane indice wrote:
> En r?ponse ? Milan Broz <mbroz@redhat.com> :
> > Good luck. Do you know how easy is to use hw keylogger for
> > example?
> 
> yes.
> 
> > How do you detect that attacker installed such hw device when
> > he has repeated access to the system?
> > TPM will not help here.
> 
> no. TPM won't help against an hw keylogger.
> But it will help in order to detect a change in my /boot 
> partition. And for that, it works. It's so easy to break the
> encryption by modifying /boot than something has to be 
> done. Here, TPM can help, so I use.
> 
> For hardware keylogger, I would use a laptop
> very tiny where every change would be noticed.
> For example, a mac book air. So thin, you can't add
> a hardware keylogger. 

Good luck with that. Or rather forget about that. 
There is ample space.

Arno
-- 
Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@wagner.name 
GnuPG:  ID: 1E25338F  FP: 0C30 5782 9D93 F785 E79C  0296 797F 6B50 1E25 338F
----
Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier