From 9c67960d12613ef9ec0631c06d10b562739a0261 Mon Sep 17 00:00:00 2001 From: pjd Date: Mon, 5 Mar 2007 12:39:49 +0000 Subject: Fix incorrect comment. Geli will protect against data modification, of course! It won't protect against reply attacks - try harder to explain them correctly. MFC after: 1 week --- sbin/geom/class/eli/geli.8 | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) (limited to 'sbin/geom/class') diff --git a/sbin/geom/class/eli/geli.8 b/sbin/geom/class/eli/geli.8 index d86f527..3f1da72 100644 --- a/sbin/geom/class/eli/geli.8 +++ b/sbin/geom/class/eli/geli.8 @@ -630,12 +630,13 @@ The offset and size of the corrupted data will be printed on the console. It is important to know against which attacks .Nm provides protection for your data. -If data is modified or copied from one place on the disk -to another, +If data is modified in-place or copied from one place on the disk +to another even without modification, .Nm -should be able to detect such a modification. -If an attacker can remember the encrypted data, modify them and write them -back to the same place, the modification will not be detected. +should be able to detect such a change. +If an attacker can remember the encrypted data, he can overwrite any future +changes with the data he owns without notice. +In other words .Nm will not protect your data against replay attacks. .Sh SEE ALSO -- cgit v1.1