4 ms·
AES being linear or not is wholly irrelevant for this. I recommend you read this article: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation https://
by dom0 9y ago
AES being linear or not is wholly irrelevant for this.
I recommend you read this article: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation
- dmitrygr 9y agoPlease explain how you'll mutate a single bit of output given only input and no knowledge of key
- snakeanus 9y agoIf you use a mode like CTR you just flip the corresponding ciphertext bit. As for CBC there are padding-oracle attacks.
- tedunangst 9y agoDo SSDs use CTR mode? How does one perform a padding oracle against an SSD? I feel like we're pretty far away from the relevant context, which is users corrupting data on an SSD.
- heheocoenev 9y agoXTS mode for block storage. Can't be CBC or CTR, where would you Store the IV or counter/nonce?
- Scaevolus 9y agoYou could store it in the block metadata, which SSD flash translation layers already use for wear-leveling purposes.
- tedunangst 9y agoThis sounds more like random speculation than informed commentary.
- rlanday 9y agoDoes the SSD let you read the raw ciphertext to perform that attack? Or does it only expose the decrypted data?
- dmitrygr 9y agoThere is no documented way to read cyphertext. I am SURE some manufacturer specific commands exist. But they will likely be undocumented, model-specific, and may be locked away behind a manufacturer key
- bsder 9y agohttps://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2009/july/if-youre-typing-the-letters-a-e-s-into-your-code-youre-doing-it-wrong/ https://www.nccgroup.trust/us/about-us/newsroom-and-events/b...
- lightedman 9y ago"Please explain how you'll mutate a single bit of output given only input" Same way Rowhammer works. Exploiting a physical vulnerability gives zero damns about encryption. Now whether you get VALID or USABLE data from the attack is an entirely different story.