New answers tagged

3

Will the created containers still be bitwise comparable? No. Veracrypt stores different containers with different encryption keys, even if you use the same password. So the containers won't be bitwise identical. You'll need to open the container and compare the files rather than compare the container. How robust will the containers be against data loss,...


4

Yes, this is a valid method of password verification. A disadvantage is that an attacker now knows that the plaintext "password_is_correct" corresponds to the last block in the ciphertext. Fortunately, AES is not vulnerable for known-plaintext attacks. PGP also checks the decrypted data, but it uses properties of a random block instead of a fixed string. ...


-1

What you're essentially doing here is deriving a key from a password manually and checking file integrity manually. The standard answer to this type of question is "don't do it". In short, try to use libraries to do both key derivation, encryption, and integrity checks. Password and file/encrypted file go in, encrypted file/decrypted file comes out. File ...


0

Does it make sense to have DFI and CFI? No. Does DFI imply CFI? Yes, because hijacking the control flow means modifying a control-data and DFI ensures the integrity of data whether it is used for control or not. Can I still use exploits that alter the control flow graph (CFG) if I have only DFI? No, it will be detected. DFI enforces a policy ...


1

Information flow control is a broad concept, but the crux of it is that one can attempt to increase the security of a process by identifying which parts of memory it should legitimately modify, and then comparing that to which parts of memory it actually attempts to modify. This can be as broad or granular as you like: you could consider Code Access Security ...


0

Information Flow Control The way that I understand it is that Information Flow Control is a superset of measures to protect the control and data flow of programs from malicious interference. Data Flow Integrity Ensuring the integrity of your data by making sure that no untrusted data (e.g. user input) can influence crucial parts of your computation. It ...



Top 50 recent answers are included