News for hackers. Stuff that matters.

A comment on VeraCrypt 1.24. Parent comment

Re:VeraCrypt 1.24 by woliveirajr on Monday October 07, 2019 @09:29PM (#21187804)
That's why I like to use a keyfile. Unless it is badly coded, taking my 1kb of random bytes should help.
[ Parent | on HN ]
Re:VeraCrypt 1.24 by CiPHPerCoder on Monday October 07, 2019 @09:37PM (#21187848)
TrueCrypt used CRC32 to mix keyfiles into the KDF. I never saw an entry in VeraCrypt's changelog addressing this deficit.

I originally proposed BLAKE2 for this purpose on their issue tracker, circa 2014.

[ Parent | on HN ]
Re:VeraCrypt 1.24 by woliveirajr on Monday October 07, 2019 @10:05PM (#21187969)
It would be a good improvement. I'll try to check the source to see how it's done
[ Parent | on HN ]
Re:VeraCrypt 1.24 by kozak on Tuesday October 08, 2019 @03:52AM (#21189807)
Does it mean that no matter the size of the key file, only the 32 bits of its CRC32 is being utilized?
[ Parent | on HN ]
Re:VeraCrypt 1.24 by CiPHPerCoder on Tuesday October 08, 2019 @04:39AM (#21190050)
https://opencryptoaudit.org/reports/TrueCrypt_Phase_II_NCC_O...

Page 15 describes it in detail.

[ Parent | on HN ]