Any information on the encrypted Knoppix user data file system (knoppix-data.aes)?

I remember about 90% of my password used for encrypting the persistent user data file system (stored as knoppix-data.aes) while setting up Knoppix a few years ago and would now like to explore the feasibility of a dictionary brute-force at… Continue reading Any information on the encrypted Knoppix user data file system (knoppix-data.aes)?

Is the example in the QUIC spec for header encryption wrong, or have I missed something?

In the QUIC spec, they’ve provided an example of header protection:
https://datatracker.ietf.org/doc/html/rfc9001#name-sample-packet-protection
They’ve got the following process (paraphrasing):
hp = c206b8d9b9f0f37644430b490eeaa314
sample … Continue reading Is the example in the QUIC spec for header encryption wrong, or have I missed something?

Omit IV for AES128-CBC when requiring to always get the same ciphertext encrypting random IDs

Imagine having images stored in a system with their 256 bit hash (BLAKE2b) as their unique ID. We want to produce a URL for each image, something like:
https://host/images/cleartext-image-ID

In order for one user not to be able to steal t… Continue reading Omit IV for AES128-CBC when requiring to always get the same ciphertext encrypting random IDs