该楼层疑似违规已被系统折叠 隐藏此楼查看此楼

Encfs security information │

│ │

│ According to a security audit by Taylor Hornby (Defuse Security), the │

│ current implementation of Encfs is vulnerable or potentially vulnerable │

│ to multiple types of attacks. For example, an attacker with read/write │

│ access to encrypted data might lower the decryption complexity for │

│ subsequently encrypted data without this being noticed by a legitimate │

│ user, or might use timing analysis to deduce information. │

│ │

│ Until these issues are resolved, encfs should not be considered a safe │

│ home for sensitive data in scenarios where such attacks are possible.

古歌翻译：

Encfs安全信息│

││

│根据泰勒·霍恩比(Defuse Security)的安全审核，│

│当前Encfs的实施存在漏洞或潜在漏洞│

│应对多种攻击。 例如，具有读/写│的攻击者

│访问加密数据可能会降低│的解密复杂性

│随后加密的数据，而没有被合法的│通知

│用户，或者可以使用时序分析来推断信息。 │

││

│在解决这些问题之前，不应将encfs视为安全│

│在可能发生此类攻击的情况下存放敏感数据。