Re: On-Disk Encryption and Data Integrity

Jeffrey Walton <noloader@xxxxxxxxx> wrote:
It seems GCM is probably not well suited
for file encryption

I don't think so. If you want to encrypt a reasonably-sized file,
GCM is probably fine even with moderately short tags (possibly even
64-96 bits, I haven't done any calculations). If the file is _huge_,
you should probably use a long tag, but then again, what's 128 bits
compared to several gigabyte?

and most likely not suited for whole disk
encryption (where a typical Microsoft installation is gigabytes).

It is obviously not suited for whole disk encryption. CBC mode is
only marginally better at that. Like I said, there are dedicated modes
for this.

--
Kristian Gjøsteen
.

Relevant Pages

  • Re: altq and IPsec - queue on incoming interface
    ... ALTQ on incoming traffic won't work -- obviously. ... It works when pf is running in the other side of the communication ... tags survive IPSEC encryption. ...
    (comp.unix.bsd.openbsd.misc)
  • Re: On-Disk Encryption and Data Integrity
    ... GCM is probably fine even with moderately short tags (possibly even ... compared to several gigabyte? ... encryption. ... CBC mode is ...
    (sci.crypt)
  • Re: [Full-disclosure] Introducing TGP...
    ... there are cipher modes ... available (namely, 'authenc' modes) which add authenticity assurances, ... The residue of CBC mode encryption, acts a a PRF just as ...
    (Full-Disclosure)
  • Re: How to encrypt/decrypt a file
    ... for CBC mode of operation you should use random IV! ... get a cryptographically random salt (different for each encryption invocation) ... The question is, from a security perspective, should the IV also be derived from a RNGCryptoServiceProvider ... even so your customer's requirement looks quite strange - the server is processing the data and the server is watching that this exact data is not stored on the server... ...
    (microsoft.public.dotnet.security)
  • Re: too much encryption
    ... A lot of disk encryption software uses CBC mode. ... scheme), or the size of the key. ...
    (comp.os.linux.security)