3 ms·

While we know the crypto design is a fail, because all the encryption related data is stored on the drive itself,... I don't see why this makes it weaker, coul

• snassar 11y ago
  The encryption algorithm is immaterial. a 4-8 digit password is just not strong to survive bruteforcing for more than a day, likely sooner with the right equipment.
  • asherkin 11y ago
    And how do you plan on brute-forcing any password without knowing the encryption algorithm in use? Which was the parent's point. You could try all possible passphrases with the wrong algorithm and you wouldn't get the plaintext, the algorithm is most certainly material.
    • snassar 11y ago
      Ah. I misread the initial comment. You are correct and I was too hasty to comment.
• asherkin 11y ago
  You're spot-on with the weakness. The specific reason it is mentioned is because their recommendation is that the encryption key should be derived from both the input numbers and a secret baked into the hardware - which would then require brute-forcing the entire key rather than just the input numbers if the attacker only had the data on the drive. With properly assembled hardware (yay, epoxy) protecting the crypto chip, extracting that key could be made very difficult, protecting against the attacker having the enclosure as well (the secure chip would need to enforce the rate limit itself).