| 1 |
Candidate: CVE-2004-2135
|
| 2 |
Description:
|
| 3 |
cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block
|
| 4 |
size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked
|
| 5 |
files to be detected without decryption.
|
| 6 |
References:
|
| 7 |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2135
|
| 8 |
http://mareichelt.de/pub/notmine/diskenc.pdf
|
| 9 |
http://mareichelt.de/pub/texts.cryptoloop.php?alt_styles=2
|
| 10 |
Notes:
|
| 11 |
jmm> IIRC there was some serious flaming about the different disk encryption systems,
|
| 12 |
jmm> I'm not sure whether this has been addressed or how real it is
|
| 13 |
jmm> Plus, cryptoloop is marked DEPRECATED for a long time IIRC
|
| 14 |
jmm> It's not included in stock 2.4 kernels, but only available in kernel-patch-cryptoloop,
|
| 15 |
jmm> which is only part of sid and hasn't been shipped with neither Woody nor Sarge, so
|
| 16 |
jmm> I'm marking all these N/A
|
| 17 |
- i am 99% sure that these issues still affect the latest kernels
|
| 18 |
- debian-installer only supports loop-aes and dm-crypt (i believe),
|
| 19 |
which are known to be not affected by these issues, so most users
|
| 20 |
are not affected
|
| 21 |
- i have started an lkml thread: http://lkml.org/lkml/2009/12/2/232, but it appears
|
| 22 |
that there is no longer any interest in the problems...
|
| 23 |
jmm> Disabled in 2.6.32-2
|
| 24 |
Bugs:
|
| 25 |
upstream:
|
| 26 |
linux-2.6: released (2.6.32-2)
|
| 27 |
2.6.18-etch-security: N/A "introduces significant change in funtionality; minor issue"
|
| 28 |
2.6.24-etch-security: N/A "introduces significant change in funtionality; minor issue"
|
| 29 |
2.6.26-lenny-security: N/A "introduces significant change in funtionality; minor issue"
|
Parent Directory
| 
Revision Log