News for hackers. Stuff that matters.
Re:Lawrence Lessig Interviews Edward Snowden [video] by tptacek on Monday October 27, 2014 @08:59AM (#8515162)
What does CBC mode have to do with the security of Bitlocker? Do you think CBC mode is weak because of that god-awful Wikipedia article on full disk encryption? Because that article is god-awful.
Re:Lawrence Lessig Interviews Edward Snowden [video] by justcommenting on Monday October 27, 2014 @09:03AM (#8515183)
I've never used or studied BitLocker and don't have much relevant expertise when it comes to FDE...just was reading comments and was reminded of a tweet that seemed relevant.

It would be really cool to hear what you think of using CBC mode for FDE, though.

Re:Lawrence Lessig Interviews Edward Snowden [video] by tptacek on Monday October 27, 2014 @09:07AM (#8515201)
I think neither CBC mode nor XTS mode is a great tool for encrypting disks, but rather than restating all my thoughts, I'll just link back to what I wrote about it a few months ago:

http://sockpuppet.org/blog/2014/04/30/you-dont-want-xts/

But, apropos this thread: the specific claim Wikipedia makes about the insecurity of CBC mode for FDE was debunked by Phil Rogaway, who --- much as I like Justin Troutman --- trumps Justin Troutman. :)

Re:Lawrence Lessig Interviews Edward Snowden [video] by justintroutman on Wednesday October 29, 2014 @03:15PM (#8529247)
I'm okay with being trumped by Phil; that's fair. :)

I'm largely in agreement with you, and I enjoyed your article on XTS. My general thought towards Elephant's contribution to CBC is that it forced coarse-grained manipulation, which is probably a lot more likely to crash a system as opposed to allowing meaningful attacks.

To risk a new design like Elephant implies that they found the attack model worth consideration; we know the rationale for including it, but we don't know the rationale for removing it. Perhaps knowing this would tell us something useful about current perceptions on disk encryption.

Lastly, I echo your disdain for sector-level encryption.

Re:Lawrence Lessig Interviews Edward Snowden [video] by justcommenting on Monday October 27, 2014 @09:30AM (#8515308)
this was an excellent read--thank you

i may have to do some wikipedia editing later today ;-)