Cryptoloop

Cryptoloop

Cryptoloop is a disk encryption module for Linux which relies on the Crypto API in the 2.6 Linux kernel series. It was first introduced in the 2.5.x kernel series. Its functionality is incorporated into the device mapper, a generic framework used to map one block device into another.

Cryptoloop can create an encrypted file system within a partition or from within a regular file in the regular file system. Once a file is encrypted, it can be moved to another storage device. This is accomplished by making use of a loop device, a pseudo-device that enables a normal file to be mounted as if it were a physical device. By encrypting I/O to the loop device, any data being accessed must first be decrypted before passing through the regular file system; conversely, any data being stored will be encrypted.

Cryptoloop is vulnerable to watermarking attacks,[1] making it possible to determine presence of watermarked data on the encrypted filesystem:

This attack exploits weakness in IV computation and knowledge of how file systems place files on disk. This attack works with file systems that have soft block size of 1024 or greater. At least ext2, ext3, reiserfs and minix have such property. This attack makes it possible to detect presence of specially crafted watermarked files, such as, unreleased Hollywood movies, cruise missile service manuals, and other content that you did not create yourself. Watermarked files contain special bit patterns that can be detected without decryption. [2]

Newer versions of cryptoloop's successor, dm-crypt, are less vulnerable to this type of attack if used correctly.[3]

See also

Crypto key.svg Cryptography portal

References

  1. ^ SecuriTeam (2005-05-26). "Linux Cryptoloop Watermark Exploit". http://www.securiteam.com/exploits/5UP0P1PFPM.html. Retrieved 2006-08-09. 
  2. ^ Saarinen, Markku-Juhani O. (2004-02-19). "Re: Oopsing cryptoapi (or loop device?) on 2.6.*". http://marc.theaimsgroup.com/?l=linux-kernel&m=107719798631935&w=2. Retrieved 2006-08-09. 
  3. ^ Markus Reichelt (2004-06-20). "Why Mainline Cryptoloop Should Not Be Used". http://mareichelt.de/pub/texts.cryptoloop.php?alt_styles=2. Retrieved 2007-04-20. 

External links



Wikimedia Foundation. 2010.

Игры ⚽ Поможем сделать НИР

Look at other dictionaries:

  • Comparison of disk encryption software — This is a technical feature comparison of different disk encryption software. Contents 1 Background information 2 Operating systems 3 Features 4 Layering …   Wikipedia

  • Dm-crypt — is a transparent disk encryption subsystem in Linux kernel versions 2.6 and later. It is part of the device mapper infrastructure, and uses cryptographic routines from the kernel s Crypto API. Unlike its predecessor cryptoloop, dm crypt was… …   Wikipedia

  • dm-crypt — is a transparent disk encryption subsystem in Linux kernel versions 2.6 and later and in DragonFly BSD. It is part of the device mapper infrastructure, and uses cryptographic routines from the kernel s Crypto API. Unlike its predecessor… …   Wikipedia

  • Loop device — Ein loop device ist allgemein ein Gerät, das auf sich selbst zurück zeigt. Es werden folgende loop devices unterschieden: in der Netzwerktechnik eine Netzwerkschnittstelle, die alle über sie versendeten Pakete direkt wieder als empfangene Pakete… …   Deutsch Wikipedia

  • BitLocker — Drive Encryption BitLocker Drive Encryption est une spécification de protection des données qui fournit le chiffrement de partition. BitLocker est inclus dans les versions Professionnelle, Entreprise et Intégrale de Windows Vista [1] ainsi que… …   Wikipédia en Français

  • BitLocker Drive Encryption — est une spécification de protection des données développée par Microsoft, et qui fournit le chiffrement de partition. BitLocker est inclus dans les versions Professionnelle, Entreprise et Intégrale de Windows Vista[1] ainsi que dans Windows… …   Wikipédia en Français

  • Bitlocker — Drive Encryption BitLocker Drive Encryption est une spécification de protection des données qui fournit le chiffrement de partition. BitLocker est inclus dans les versions Professionnelle, Entreprise et Intégrale de Windows Vista [1] ainsi que… …   Wikipédia en Français

  • Loop device — In Unix like operating systems, a loop device, vnd (vnode disk), or lofi (loopback file interface) is a pseudo device that makes a file accessible as a block device.Before use, a loop device must be connected to an existing file in the filesystem …   Wikipedia

  • dm-crypt — est un sous système transparent de chiffrement de disques dans le noyau Linux versions 2.6 et supérieur. Il est une partie de l infrastructure device mapper, et utilise des routines de chiffrement issues des API Crypto du noyau. Contrairement à… …   Wikipédia en Français

  • Device mapper — In the Linux kernel, the device mapper serves as a generic framework to map one block device onto another. It forms the foundation of LVM2 and EVMS, software RAIDs, dm crypt disk encryption, and offers additional features such as file system… …   Wikipedia

Share the article and excerpts

Direct link
… Do a right-click on the link above
and select “Copy Link”