On Tue, Jun 05, 2018 at 07:05:52PM +0200, Richard Weinberger wrote: > > An attack scenario where someone manages to downgrade the crypto of > > your phone would require replacing your kernel and your /system > > partition --- at which point, you've got other problems. :-) > > This means Speck is never enabled at kernel level on non-cheap phones? No. And even if it were, the /system partition is going to request that the kernel encrypt files using one and only encryption algorithm: namely, AES. Things aren't as configurable on an Android phone as you might be used to on a laptop. Some manufacturers use ext4; some manufacturers decide they want to use f2fs. They make that decision not you, and only the file system utilities for that one file system are compiled into the system. Similarly, you don't get to choose what crypto algorithm you use; that's decided for you by the manufacturer. Which is good; it's one less thing that hte attacker can spoof, and one less thing for users to potentially get wrong. - Ted -- To unsubscribe from this list: send the line "unsubscribe linux-fscrypt" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
|