Messages in this thread | ![/](/images/icornerl.gif) | | From | (David Wagner) | Subject | Re: partially encrypted filesystem | Date | Thu, 4 Dec 2003 19:18:26 +0000 (UTC) |
| |
Jörn Engel wrote: >Depends on how much security you really care about. If you really >don't mind the pain involved, some metadata should explicitly *not* be >encrypted, to avoid known plaintext attacks.
What? No. Modern cryptosystems are designed to be secure against known plaintext attacks. Making your system more convoluted merely to avoid providing known plaintext is a lousy design approach: the extra complexity usually adds more risk than it removes. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| ![\](/images/icornerr.gif) |