Andreas Gunnarsson wrote:
On Wed, Jan 04, 2006 at 11:11:01PM +0100, knitti wrote:
my threat model includes the follwing two cases. for both of then svnd
can't protect me really well
case 1) lets say someone can predict some blocks in my encrypted data,
then she can find every block (64bit) everywhere within the container
with the same data.
Of course not, that would have been true if it used ecb. It uses cbc
which encrypts each disk block with an iv that depends on the block
number, so a plaintext block will be encrypted differently depending
both on which disk block it is in and what data precedes it in that
block.
Yeah, and had it been using ECB, still two plaintext would have to be
aligned to the beginning of a
block and fill the 64 bits for the ciphered block to look the same.