Post B2YC6xlbSlYSH1jGTo by gumnos@mastodon.bsd.cafe
(DIR) More posts by gumnos@mastodon.bsd.cafe
(DIR) Post #B2YC6vvSJAFOZ0K6Yi by ParadeGrotesque@mastodon.sdf.org
2026-01-21T22:37:11Z
0 likes, 0 repeats
'The use of encryption in qcow and qcow2 images is considered to be flawed by modern cryptography standards, suffering from a number of design problems ..."Hmmmphmmm ☹️
(DIR) Post #B2YC6wtih6S9ZuWEUa by h3artbl33d@exquisite.social
2026-01-21T23:40:35Z
0 likes, 0 repeats
@ParadeGrotesque The use of qcow and qcow2 images is considered to be outdated and flawed by modern cryptography standards.
(DIR) Post #B2YC6xlbSlYSH1jGTo by gumnos@mastodon.bsd.cafe
2026-01-22T17:19:01Z
0 likes, 0 repeats
@h3artbl33d @ParadeGrotesque Okay, which one is incredibly dense/stupid: me or the quote?I thought qcow/qcow2 were disk-image formats and had…um…nothing to do with cryptography?
(DIR) Post #B2YC6yNBD3c29ZJH3A by khm@hj.9fs.net
2026-01-22T17:37:03Z
1 likes, 0 repeats
you're right! except... it supports a half-ass encryption feature, which is subject to some pretty easy attacks. usage is explicitly discouraged in the project and has been for a good while now. I believe but cannot prove that the qcow encryption stuff predates common availability of LUKS and similar full-disk encryption suites in guest OSes.CC: @h3artbl33d@exquisite.social @ParadeGrotesque@mastodon.sdf.org