3 ms·
The journal sealing provides forward security. The sealing keys are exchanged regularly, and the old keys are deleted safely. A verification key, which is store
by andor 13y ago
The journal sealing provides forward security. The sealing keys are exchanged regularly, and the old keys are deleted safely. A verification key, which is stored on another device or offline, can be used to calculate the sealing key for any given moment. While an attacker can change the logs, this will always be visible in an audit.
http://lwn.net/Articles/512895/ http://lwn.net/Articles/512895/
https://eprint.iacr.org/2013/397.pdf https://eprint.iacr.org/2013/397.pdf
- d0 13y agothe old keys are deleted safely Assuming nothing has managed to redirect those unlinks for example...
- andor 13y agoI guess you're right. The mechanism is forward-secure, which means for an attacker that tampering the logs is the first thing to do, not the last ;-) As soon as the attacker manages to extract the state of the key generator from memory at one point of time, the log entries from that and the following sealing periods can be modified and cleanly sealed.