3 ms·
> Its also not possible to get data injected offline into your filesystem without having the keys. This is, in theory, possibly against volumes encrypted using
by brobinson 7y ago
> Its also not possible to get data injected offline into your filesystem without having the keys.
This is, in theory, possibly against volumes encrypted using AES XTS (which seems to the how the majority of FDE systems work) as the ciphertext is indeed malleable.
- mercora 7y agoi am no expert on this but i was thinking it is only possible to inject noise which is likely corrupting the filesystem in the process. copying/moving valid blocks should be prevented by XTS as far as i understood (which might not be that much). I guess using a filesystem with integrity checks helps a bit although its still not authenticated or something.
- brobinson 7y agoThere's some more details/links here (I'm also not an expert): https://en.wikipedia.org/wiki/Disk_encryption_theory#XTS_weaknesses https://en.wikipedia.org/wiki/Disk_encryption_theory#XTS_wea...