GBDE and GELI security

2007-12-04 Thread Chad Perrin
I've read reports to the effect that GBDE is vulnerable to online dictionary attacks unless two-factor authentication is used. The only such report I can find now is this discussion of NetBSD's CGD, where its author contrasts it with GBDE: http://www.onlamp.com/lpt/a/6384 Is this still the

Re: GBDE and GELI security

2007-12-04 Thread RW
On Tue, 4 Dec 2007 17:04:23 -0700 Chad Perrin [EMAIL PROTECTED] wrote: I've read reports to the effect that GBDE is vulnerable to online dictionary attacks unless two-factor authentication is used. The only such report I can find now is this discussion of NetBSD's CGD, where its author