Hacker News new | ask | show | jobs
by cbhl 4696 days ago
> encryption would probably allow tampered pages to be detected

Careful!

It can, but doesn't always. For example, eCryptfs currently doesn't protect against tampering; it uses Cipher Block Chaining (CBC) mode without a HMAC or other signature.

(I'm working with some colleagues to add Galois/Counter Mode (GCM) support to eCryptfs, which does provide some form of tamper-detection.)