Information leaks

Posted Apr 14, 2015 17:41 UTC (Tue) by chloe_zen (guest, #8258)
In reply to: Information leaks by abatters
Parent article: Ext4 encryption

If an encrypted directory does not encrypt the filenames, it is fail.

Information leaks

Posted Apr 15, 2015 1:30 UTC (Wed) by mathstuf (subscriber, #69389) [Link] (1 responses)

What about the number of files or directories? Think a maildir tree. Even the file size could be useful. Though this is a good first step.

Information leaks

Posted Apr 15, 2015 1:48 UTC (Wed) by Cyberax (✭ supporter ✭, #52523) [Link]

Well, you can pad files with a small random-sized pad. But yeah, there are limits of what is practical.

I don't consider the disclosure of file sizes to be a huge problem for lots of people. And you always have dm-crypt if you are really paranoid.

Personally, I'm happily using eCryptfs on my self-made NAS, automatically mounted when my Mac connects to the share with the password that I store in Keychain.