OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: decrypting partition only on one single hardware?

From: Michael (belenusbsdmail.de)
Date: Fri Feb 01 2008 - 08:16:47 CST


Hi,

thanks for your fast answer.

Raimo Niskanen schrieb:
> Interesting idea, but I wonder if it is necessary...

Maybe not necessary, but still something I'd like to try. So, any ideas?

> Again, if I remember correctly; if your salt is random enough,
> it need not be secret. It is just used to randomize your password.
>
> Attackers come with pre-calculated dictionaries and try
> to crack your password, and if the salt is unknow to the
> attacker until he/she gets into the system he/she will
> have to re-calculate the whole dictionary with the
> now known salt and rounds. And if the rounds is high
> enough re-calculating a dictionary will not be feasible.

Well, since I want to have the partition to be automagically mounted
when I insert the USB stick (with the saltfile), having the HDD (with
the modified mount_vnd on it) and the USB stick would be enough to
decrypt it.

Michael