3 ms·
For the Header Keys (which I believe this is what the attack is going after - as that is what the password unlocks), TC does use a Salt. See [0] And for slow h
by lambada 14y ago
For the Header Keys (which I believe this is what the attack is going after - as that is what the password unlocks), TC does use a Salt. See [0]
And for slow hashing schemes that is a fair point, but when you're looking at file decryption, there is nothing to stop parallel attempts happening at once on different machines. Also TC does support using cascading ciphers which can help to slow it down.
Note: I'm not an expert in Cryptography by any means, but this is my current understanding.
[0] http://www.truecrypt.org/docs/header-key-derivation http://www.truecrypt.org/docs/header-key-derivation
- LammyL 14y agoIt says they are only doing 1000 (or 2000) hash iterations to derive the key, and it seems like it is too few iterations to be much of a brute force deterrent these days. I would have expected something like 100000 iterations, or 1 second or more of calculation time on a modern CPU.