0

Veracrypt is a tool to encrypt disk.

It uses many encrypting algorithms, including AES.

I'm wondering if someone knows how Veracrypt proceed if we choose AES encryption with a password of 3 characters (considering that Veracrypt will use the password as the AES key, and the size key must be a fixed size, eg. 128, 192, 256 bits) ?

Thanks!

Improve this question

1 Answer 1

Reset to default
1

veracrypt will not use the users password as the AES key. The AES key will generated from random numbers and protected by a header key. This header key is derived from the password using a key derivation function (KDF) which both hides that the password is weak and also creates a key which is long enough. For more details see https://veracrypt.codeplex.com/wikipage?title=Header%20Key%20Derivation.

Of course, an attacker knowing that only a very weak password was used can brute-force it.

Improve this answer
2

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .