Описание
cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption.
Пакеты
Пакет | Статус | Версия исправления | Релиз | Тип |
---|---|---|---|---|
linux-2.6 | fixed | 2.6.32-2 | package | |
linux-2.6.24 | removed | package |
Примечания
minor issue; solution (removal of cryptoloop) would be a significant change
if backported to the stable releases
mitigation: use dm-crypt or loop-aes for disk encrytion instead of cryptoloop
Связанные уязвимости
cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption.
cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption.