Subject: Re: FUD about CGD and GBDE
To: Perry E. Metzger <perry@piermont.com>
From: Poul-Henning Kamp <phk@phk.freebsd.dk>
List: tech-security
Date: 03/04/2005 00:46:59
In message <87d5ugi9ht.fsf@snark.piermont.com>, "Perry E. Metzger" writes:

>> MD5 was believed to be heavily understood in literature. It was
>> well established. Look at what happened to it.
>
>Yup. And Roland made the algorithm you use for encrypting your disk
>*pluggable*. That way, if AES is broken, you can replace it with the
>next big thing and move on with your life.
>
>Now, if AES is indeed broken, GBDE is in serious trouble, but CGD is
>not. Specific users of CGD have to change their drives, but the
>framework continues to work as advertised.

Gee Perry, now you're spreading FUD.

You know perfectly well that it would take less than one hour to
substitute another algorithm in the GBDE source code.

Poul-Henning

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk@FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.