markus reichelt wrote: > in order to prevent watermark attacks, v3 has to be used. v2 and v1 > of loop-aes are vulnerable to it In normal use, loop-AES-v2 on-disk format is not vulnerable to watermark attacks. By normal use I mean someone copying watermarked file to encrypted file system. loop-AES-v2 is not vulnerable as long as file system chooses sector number on partition where file data is written. However, v2 is vulnerable if adversary is able to choose sector number on partition where file data is written. In normal use that is not the case. -- Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 DD - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/