On Tue, Aug 21, 2018 at 9:13 PM Sean Fagan <[email protected]> wrote:

> On Aug 21, 2018, at 8:11 PM, Alan Somers <[email protected]> wrote:
> > The last time I looked (which was a long time ago), Oracle's ZFS
> encryption looked extremely vulnerable to watermarking attacks.  Did
> anybody ever fix that?
>
> This isn’t Oracle’s implementation, but I don’t know how compatible or not
> it is with it.
>
> Sean.
>

It wasn't just an implementation problem, it was in the design.  IIRC,
Oracle's encryption allowed encrypted blocks to be deduplicated.  There's
pretty much no way to defend against watermarking attacks with such a
design.  Does the new encryption design have the same flaw?

-Alan
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "[email protected]"

Reply via email to