• Milan Broz's avatar
    dm crypt: add TCW IV mode for old CBC TCRYPT containers · ed04d981
    Milan Broz authored
    dm-crypt can already activate TCRYPT (TrueCrypt compatible) containers
    in LRW or XTS block encryption mode.
    
    TCRYPT containers prior to version 4.1 use CBC mode with some additional
    tweaks, this patch adds support for these containers.
    
    This new mode is implemented using special IV generator named TCW
    (TrueCrypt IV with whitening).  TCW IV only supports containers that are
    encrypted with one cipher (Tested with AES, Twofish, Serpent, CAST5 and
    TripleDES).
    
    While this mode is legacy and is known to be vulnerable to some
    watermarking attacks (e.g. revealing of hidden disk existence) it can
    still be useful to activate old containers without using 3rd party
    software or for independent forensic analysis of such containers.
    
    (Both the userspace and kernel code is an independent implementation
    based on the format documentation and it completely avoids use of
    original source code.)
    
    The TCW IV generator uses two additional keys: Kw (whitening seed, size
    is a...
    ed04d981
dm-crypt.c 47.7 KB