LibreCrypt: Transparent on-the-fly disk encryption for Windows. LUKS compatible

Re:LibreCrypt: Transparent on-the-fly disk encryption for Wi... by MichaelGG on Saturday June 06, 2015 @05:08AM (#9670209)

A practical flaw in, say, AES is going to be so much more to worry about than just your disk encryption. That's a major breakthrough. Even so, the response to that is to layer ciphers, not to support many more. But that's still rather silly as it's astronomically more likely to find a bug in implementation or design of the FDE than in AES.

As far as implementation bugs, supporting many options means more users will pick the wrong options, and the attack surface becomes larger so that the chance of implementation issues goes up.

[ Parent | on HN ]

Re:LibreCrypt: Transparent on-the-fly disk encryption for Wi... by vbezhenar on Saturday June 06, 2015 @06:33AM (#9670344)

There might be flaw in implementation. Those are much more likely.

> As far as implementation bugs, supporting many options means more users will pick the wrong options, and the attack surface becomes larger so that the chance of implementation issues goes up.

Application must prevent users from picking the wrong options.

[ Parent | on HN ]

Re:LibreCrypt: Transparent on-the-fly disk encryption for Wi... by tomjen3 on Saturday June 06, 2015 @07:20AM (#9670409)

Bugs in the implementation are bad enough. I don't really care how the encryption is not secure, but that it isn't.

[ Parent | on HN ]