Verifying GELI disk encryption

R. B. Riddick arne_woerner at yahoo.com
Tue Aug 15 23:00:54 UTC 2006


--- User1001 <supraexpress at globaleyes.net> wrote:
> What are some relatively simple ways to verify the encryption of/on a
> GELI device?
>
Hmm...

You could compare sector-wise the content of the encrypted and the clear
device. If u find a match the encryption is not so strong... :-)

WARNING! The following idea (if realized) might destroy important data):
You could write a certain pattern to the device and then u could read from the
device and compare the result to the pattern.
If u find a mismatch the encryption was irreversible. :-)

Or what did u mean?

The strength of cryptographic algorithms is often (e. g. in case of GEOM's
GELI) not so obvious, because: There might be a mathematical trick, that solves
the underlying problem without the secret, or there might be a technical trick
(e. g. a time machine or something even more weird (maybe something with
parallel time lines that can be split whenever a decision has to be made (like
in StarTrek TNG with Cpt. Picard))), that solves the underlying problem with
brute force in linear time (linear in the amount of decisions, that have to be
made; e. g. 16 bit secret results in 16 decisions) or even faster (whenever a
decision turns out to be wrong, a failure message is sent back to the past -
like in the movie Butterfly Effect). :-)

-Arne


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


More information about the freebsd-geom mailing list