Secure IDE? (fwd)

[Trei, Peter]

> Mike Rosing[SMTP:eresrch at eskimo.com]
> 
> 
> Forwarded by request.
> 
> ---------- Forwarded message ----------
> 
> sector address as the IV. IVs don't need to be
>  random, secret, or
> unpredictable - they just need to be unrepeated.
>  (I'm
>  assuming
>  sector-at-a-
> time encryption).
> 
> 
> 
> If the IV is not a secret how are we going to prevent
> block replay attacks on cipher text?
> 
> 
> Regards Sarath.
> 
This isn't a communications protocol. We're talking about
disk storage. The only circumstances where an attacker
could use this as an attack vector would be if the attacker
could take multiple snapshots of the disk, possibly replacing
blocks at later times.

Peter