Re: [GIT PULL] fscrypt updates for 4.18

From: Theodore Y. Ts'o
Date: Tue Jun 05 2018 - 13:02:59 EST


On Tue, Jun 05, 2018 at 06:10:24PM +0200, Richard Weinberger wrote:
> That's the question. I understand the use case, but I fear attack scenarios
> where someone manages to downgrade the crypto of my phone.
> This is why I was asking whether Android tells me whether Speck is used or not.
> "it does encryption" is clearly not enough.

An attack scenario where someone manages to downgrade the crypto of
your phone would require replacing your kernel and your /system
partition --- at which point, you've got other problems. :-)

- Ted