Subject: Re: FUD about CGD and GBDE
To: ALeine <aleine@austrosearch.net>
From: Jason Thorpe <thorpej@shagadelic.org>
List: tech-security
Date: 03/04/2005 11:23:36
On Mar 2, 2005, at 4:33 PM, ALeine wrote:
> You need 2^128 steps to break the encryption of a single sector.
> But you have no idea which of the 2^128 sectors is the right one,
You may not know "for sure", but you can make a pretty well educated
guess. You are basically ignoring Roland's argument that disks are
well-structured.
Start by looking for the MBR partition map / disklabel / GPT. Those
are kept in well-known places, so you can greatly narrow your search
space. Use the info contained therein to find likely superblock
locations. Etc. You do not have to brute-force the entire disk. You
just have to be smart about how you search.
-- thorpej