|
|
| Line 1: |
Line 1: |
| THIS PAGE IS A DRAFT ! Information on this page is in need of further research and refinement !
| | {{Draft}} |
| | |
| This page will need to be split into " difficulty tiers " and since it's the first page this has been needed on , it makes it an excellent test subject to figure out the best way to do so .
| |
|
| |
|
| This page is written with [[Tiers|Intermediate]] users in mind, but of course everyone is encouraged to try to understand. | | This page is written with [[Tiers|Intermediate]] users in mind, but of course everyone is encouraged to try to understand. |
| Line 11: |
Line 9: |
|
| |
|
| == Ciphers == | | == Ciphers == |
| Ciphers scramble the files that will be saved, so it's important to pick a good one. Computers have had, for many decades now, built in support for AES, making it the fastest and most secure option for pretty much everyone. | | Ciphers scramble the files that will be saved, so it's important to pick a good one. Computers have, for many decades now, had |
|
| |
|
| == On-disk Format ==
| | built in support for [[AES]], making it the fastest and most secure option for pretty much everyone. |
| The on-disk format defines how the encrypted data is stored on the disk itself . While you ''could'' just write the encrypted blocks directly to the disk , you would be at risk of a number of different attacks . CBC ( Cipher-block chaining ) is an older on-disk format and should not really be used . It has malleability vulnerabilities ( meaning data can be inserted without knowing the encryption key ) , and also , specially-crafted files can be " fingerprinted " , meaning they can be located on the disk . XTS ( XEX-based tweaked-codebook mode with ciphertext stealing ) is better at mitigating these issues , so it's the recommended default . It's also usually hardware accelerated on x86 . XTS does have its own vulnerabilities , but most of these issues can be mitigated by using a filesystem that can verify and repair corrupted data , like ZFS or BTRFS .
| |
|
| |
|
| == Initialization Vectors ( IV ) == | | == Initialization Vectors ( IV ) == |