From proff Tue Jul 16 19:14:55 1996 Received: (proff@localhost) by suburbia.net (8.7.4/Proff-950810) id TAA16694 for best-of-security; Tue, 16 Jul 1996 19:14:55 +1000 Received: from pdx1 (pdx1.world.net [192.243.32.18]) by suburbia.net (8.7.4/Proff-950810) with SMTP id SAA15223 for ; Tue, 16 Jul 1996 18:31:52 +1000 Received: from toad.com (toad.com [140.174.2.1]) by pdx1 (8.6.9/8.6.9) with ESMTP id BAA20529 for ; Tue, 16 Jul 1996 01:33:08 -0700 Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3) id NAA23827 for cypherpunks-outgoing; Mon, 15 Jul 1996 13:07:59 -0700 (PDT) Received: from abraham.cs.berkeley.edu (abraham.CS.Berkeley.EDU [128.32.37.121]) by toad.com (8.7.5/8.7.3) with ESMTP id NAA23822 for ; Mon, 15 Jul 1996 13:07:53 -0700 (PDT) Received: (from iang@localhost) by abraham.cs.berkeley.edu (8.7.5/local) id NAA14011; Mon, 15 Jul 1996 13:07:20 -0700 To: cypherpunks@toad.com Path: not-for-mail From: iang@cs.berkeley.edu (Ian Goldberg) Newsgroups: isaac.lists.cypherpunks Subject: Re: DES & IDEA built right into the Linux kernel... Date: 15 Jul 1996 13:07:20 -0700 Organization: ISAAC Group, UC Berkeley Lines: 31 Distribution: isaac Message-ID: <4se8do$dlp@abraham.cs.berkeley.edu> References: <199607130507.WAA25103@myriad> Sender: proff Precedence: bulk -----BEGIN PGP SIGNED MESSAGE----- In article <199607130507.WAA25103@myriad>, Anonymous wrote: >> Nicholas Leon has created tools that allow DES >> and IDEA encryption at the device level for the Linux kernel. Some of >> the patches are in the 2.0.4 kernel, and the rest can be found at >> >> http://www.binary9.net/nicholas/linuxkernel/patches/ > > >Yep, you can mount encrypted files or partitions as filesystems. (sorta >like securedrive/securedevice for messydos.) Nifty stuff... Except that last I checked (2.0.6) it was completely insecure. The DES-encrypted filesystem ignored your password and always used a key of all 0's (which is a weak key in DES, to boot). I've been touching it up to do DES and IDEA _right_ (CBC mode within each block, IV based on block number), and plan to put in some simple stego as well. - Ian -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMeqk5EZRiTErSPb1AQEbdwQAl/ZyhK+ZczFnfUFm9wVNGAq9MBSGNmZc t1xS2G6urjit3IvHn0ZYSCzkwUj00Hun4FLdFkp0i45M2PWGSJMZtr/Mx7Xua9yr 2uw1p3bN1iId8JrQOGuo1aCTm8rTUh30OW2cL+jPM+RBWgLGg9YcBUQzO7OLoqeM xpROxmPL8CI= =pezJ -----END PGP SIGNATURE-----