Jim MacBaine wrote: > Since then, dm-crypt has obviously caught up. No it has not. Loop-AES still has stronger and better IV computation, and multi-key mode that reduces amount of data encrypted with one encryption key. Try modifying last byte of 512 byte sector, and observe how many 128 bit ciphertext blocks change; loop-AES: 32, dm-crypt: 1 -- Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 DD - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/
