🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: de.comp.os.unix.linux.misc
Article #78

Re: Watermark attack, war Re: Loopback Verschluesselung unter SuSE 9.2

#78
From: Helmut Zeisel
Date: Thu, 20 Jan 2005 09:49
36 lines
2700 bytes
Helmut Zeisel wrote:


> Sovweit ich es verstehe, geht es um "watermark" Attacken. Wenn ich es 
> richtig verstehe, geht es hier um eine "known plaintext" Attacke. 
> Gewisse "magic numbers" im Linux-Dateisystem sind bekannt, man wei� 
> genau, wo sich diese Werte im verschluesselten Dateisystem befinden und 
> kann dadurch die Brute-Force-Attacken erleichtern.
> 
> Kann das wer best�tigen oder genauer erkl�ren?

Da habe ich noch was gefunden:

Watermark-attack ist also keine known-plaintext, sondern 
chosen-plaintext Attacke.

http://marc.theaimsgroup.com/?l=linux-kernel&m=107719798631935&w=

List:       linux-kernel
Subject:    Re: Oopsing cryptoapi (or loop device?) on 2.6.*
From:       Jari Ruusu <jariruusu () users ! sourceforge ! net>
Date:       2004-02-19 13:34:54
Message-ID: <4034BB7E.4ED20C2 () users ! sourceforge ! net>

Markku-Juhani O. Saarinen discovered watermark attack against 
cryptoloop, here is his paper:

     http://www.tcs.hut.fi/~mjos/doc/diskenc.pdf

This attack makes it possible to detect presense of specially crafted 
watermarked files, such as, unreleased Hollywood movies, cruise missile 
service manuals, and other content that you did not create yourself. 
Watermarked files contain special bit patterns that can be detected 
without decryption.

Helmut
Technical Details
Message-ID: <cso2b6.7o.1@webpc1.vaig.vads.cc>
Path: arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!news.glorb.com!newsfeed-east.nntpserver.com!nntpserver.com!chi1.usenetserver.com!c03.atl99.usenetserver.com!news.usenetserver.com!newsfeed.yul.equant.net!newsfeed.us.prserv.net!prserv.net!news3.prserv.net!news.vai.co.at
References: <1105678490.641804@news.liwest.at> <34pjukF4damteU1@individual.net> <csj15d.2jo.1@webpc1.vaig.vads.cc> <357jc1F4hcj91U1@individual.net> <cso1f4.do.1@webpc1.vaig.vads.cc>

Show Full Headers
Complete Article Headers
X-Google-Thread: f55df,c82380a6c1e75ec2
X-Google-Thread: 1101c9,c82380a6c1e75ec2
X-Google-Attributes: gidf55df,gid1101c9,public
X-Google-Language: GERMAN,ASCII
Message-ID: <cso2b6.7o.1@webpc1.vaig.vads.cc>
Date: Thu, 20 Jan 2005 10:49:08 +0100
From: Helmut Zeisel <helmut.zeisel@aon.at>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040113
X-Accept-Language: en-us, en
MIME-Version: 1.0
Newsgroups: de.comp.os.unix.linux.misc,at.linux
Subject: Re: Watermark attack, war Re: Loopback Verschluesselung unter SuSE
 9.2
References: <1105678490.641804@news.liwest.at> <34pjukF4damteU1@individual.net> <csj15d.2jo.1@webpc1.vaig.vads.cc> <357jc1F4hcj91U1@individual.net> <cso1f4.do.1@webpc1.vaig.vads.cc>
In-Reply-To: <cso1f4.do.1@webpc1.vaig.vads.cc>
Content-Type: text/plain; charset=ISO-8859-15; format=flowed
Content-Transfer-Encoding: 8bit
NNTP-Posting-Host: news.vai.co.at
X-Trace: 20 Jan 2005 09:53:46 GMT, news.vai.co.at
Organization: Global Network Services - Remote Access Mail & News Services
Lines: 36
X-Complaints-To: abuse@prserv.net
Path: arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!news.glorb.com!newsfeed-east.nntpserver.com!nntpserver.com!chi1.usenetserver.com!c03.atl99.usenetserver.com!news.usenetserver.com!newsfeed.yul.equant.net!newsfeed.us.prserv.net!prserv.net!news3.prserv.net!news.vai.co.at