News for hackers. Stuff that matters.
Re:Lawrence Lessig Interviews Edward Snowden [video] by tptacek on Monday October 27, 2014 @09:07AM (#8515201)
I think neither CBC mode nor XTS mode is a great tool for encrypting disks, but rather than restating all my thoughts, I'll just link back to what I wrote about it a few months ago:

http://sockpuppet.org/blog/2014/04/30/you-dont-want-xts/

But, apropos this thread: the specific claim Wikipedia makes about the insecurity of CBC mode for FDE was debunked by Phil Rogaway, who --- much as I like Justin Troutman --- trumps Justin Troutman. :)

Re:Lawrence Lessig Interviews Edward Snowden [video] by justintroutman on Wednesday October 29, 2014 @03:15PM (#8529247)
I'm okay with being trumped by Phil; that's fair. :)

I'm largely in agreement with you, and I enjoyed your article on XTS. My general thought towards Elephant's contribution to CBC is that it forced coarse-grained manipulation, which is probably a lot more likely to crash a system as opposed to allowing meaningful attacks.

To risk a new design like Elephant implies that they found the attack model worth consideration; we know the rationale for including it, but we don't know the rationale for removing it. Perhaps knowing this would tell us something useful about current perceptions on disk encryption.

Lastly, I echo your disdain for sector-level encryption.

Re:Lawrence Lessig Interviews Edward Snowden [video] by justcommenting on Monday October 27, 2014 @09:30AM (#8515308)
this was an excellent read--thank you

i may have to do some wikipedia editing later today ;-)