[Bug 534644] New: Use aes-xts-plain instead of aes-cbc-essiv for hard disk encryption - openSUSE Bugs - openSUSE Mailing Lists

newer
[Bug 513001] New: Kgpg keyservers...

[Bug 534644] New: Use aes-xts-plain instead of aes-cbc-essiv for hard disk encryption

older
[Bug 525690] New: Cheese crashed...

bugzilla_noreply＠novell.com

27 Aug 2009 27 Aug '09

01:17

http://bugzilla.novell.com/show_bug.cgi?id=534644 Summary: Use aes-xts-plain instead of aes-cbc-essiv for hard disk encryption Classification: openSUSE Product: openSUSE 11.2 Version: Factory Platform: Other OS/Version: Other Status: NEW Severity: Critical Priority: P5 - None Component: Security AssignedTo: security-team@suse.de ReportedBy: bitdealer@gmail.com QAContact: qa@suse.de Found By: --- Please set the default to be used for encrypted partitions to aes-xts-plain instead of aes-cbc-essiv because aes-xts-plain is an improvement to the old aes-cbc-essiv that avoids watermark attacks besides other stuff. By now it is used for some time so there is no reason to stick with the outdated, less secure stuff. Also please increase the key size to 512 ("-s 512"). -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

Show replies by date

bugzilla_noreply＠novell.com

27 Aug 27 Aug

01:19

New subject: [Bug 534644] Use aes-xts-plain instead of aes-cbc-essiv for hard disk encryption

http://bugzilla.novell.com/show_bug.cgi?id=534644 User bitdealer@gmail.com added comment http://bugzilla.novell.com/show_bug.cgi?id=534644#c1 --- Comment #1 from Stephan Kleine 2009-08-26 19:19:27 MDT --- Just in case it isn't clear from the above: I'm referring to the default used by the "Encrypt partition" settings of the installer / partitioner. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

06:53

New subject: [Bug 534644] Use aes-xts-plain instead of aes-cbc-essiv for hard disk encryption

http://bugzilla.novell.com/show_bug.cgi?id=534644 User lnussel@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=534644#c2 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |aschnell@novell.com Resolution| |WONTFIX --- Comment #2 from Ludwig Nussel 2009-08-27 00:52:58 MDT --- We use the upstream default of cryptsetup. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

13:58

New subject: [Bug 534644] Use aes-xts-plain instead of aes-cbc-essiv for hard disk encryption

http://bugzilla.novell.com/show_bug.cgi?id=534644 User bitdealer@gmail.com added comment http://bugzilla.novell.com/show_bug.cgi?id=534644#c3 Stephan Kleine changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|WONTFIX | --- Comment #3 from Stephan Kleine 2009-08-27 07:58:28 MDT --- Then at least please give me an option to manually change the encryption method during partition creation (some simple checkbox to enter it is fine with me). -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

14:02

New subject: [Bug 534644] Use aes-xts-plain instead of aes-cbc-essiv for hard disk encryption

http://bugzilla.novell.com/show_bug.cgi?id=534644 User lnussel@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=534644#c4 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lnussel@novell.com AssignedTo|security-team@suse.de |aschnell@novell.com Severity|Critical |Enhancement --- Comment #4 from Ludwig Nussel 2009-08-27 08:02:49 MDT --- TBH I'd just use cryptsetup on the command line for the advanced features. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

14:05

New subject: [Bug 534644] Use aes-xts-plain instead of aes-cbc-essiv for hard disk encryption

http://bugzilla.novell.com/show_bug.cgi?id=534644 User bitdealer@gmail.com added comment http://bugzilla.novell.com/show_bug.cgi?id=534644#c5 --- Comment #5 from Stephan Kleine 2009-08-27 08:05:32 MDT --- Sorry, I meant _text_box. E.g. do it with upstream default if nothing is entered and if something is entered use that as _only_ options for the luksFormat call. E.g. entering "-c aes-xts-plain -y -s 512" results in "cryptsetup luksFormat -c aes-xts-plain -y -s 512 /dev/sdXY". That way it is flexible and everybody gets happy ;) -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

14:07

New subject: [Bug 534644] Use aes-xts-plain instead of aes-cbc-essiv for hard disk encryption

http://bugzilla.novell.com/show_bug.cgi?id=534644 User aschnell@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=534644#c6 Arvin Schnell changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution| |FEATURE --- Comment #6 from Arvin Schnell 2009-08-27 08:07:14 MDT --- This is a non-trivial feature request. You are free to open a feature request. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

19:37

New subject: [Bug 534644] Use aes-xts-plain instead of aes-cbc-essiv for hard disk encryption

http://bugzilla.novell.com/show_bug.cgi?id=534644 User bitdealer@gmail.com added comment http://bugzilla.novell.com/show_bug.cgi?id=534644#c7 --- Comment #7 from Stephan Kleine 2009-08-27 13:37:48 MDT --- https://features.opensuse.org/307523 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

5366

Age (days ago)

5366

Last active (days ago)

Download

7 comments

1 participants

tags

participants (1)

bugzilla_noreply＠novell.com