33
Disk Encryption Doesn’t
Detect Manipulations!
Keep in mind:
Although an attacker cannot read your data,
they can change it!
While it’s hard to do,
attackers can exchange blocks
on encrypted disks.
Consider using dm-verity/integrity too!
Disk encryption provides data secrecy 🔐: without the key, the data cannot be read. However, it does not ensure data authentication. An attacker can alter or replace blocks on the disk 💽, and the data might still decrypt and function correctly. Successful attacks have been demonstrated in the past: https://clemens.endorphin.org/nmihde/nmihde-A4-ds.pdf
Get in touch
sigma star gmbh
Eduard-Bodem-Gasse 6, 1st floor
6020 Innsbruck | Austria
