Re: [PATCH] Delete cryptoloop

James Morris
2004-07-22T03:30:59Z

On Wed, 21 Jul 2004, Andrew Morton wrote:

> > which is buggy, unmaintained, and
> > reportedly has mutliple security weaknesses.
>
> Doesn't dm-crypt have the same security weaknesses?

Jari Ruusu claims that anything with on-disk cryptoloop compatibility is
vulnerable to dictionary attacks and IV deduction. Fruhwirth Clemens
claims that this is FUD, per the thread below.

http://marc.theaimsgroup.com/?l=linux-kernel&m=108447509327847&w=2

It would be good if we could get some further review on the issue by an
independent, well known cryptographer.

- James
--
James Morris
<jmorris@redhat.com>