From a57a79c61da52b84236a4641ac23b2924fff88b6 Mon Sep 17 00:00:00 2001 From: Mounir IDRASSI Date: Mon, 21 Mar 2022 00:14:33 +0100 Subject: Update documentation to add Blake2s-256 and remove RIPEMD-160 --- doc/html/FAQ.html | 11 +---------- 1 file changed, 1 insertion(+), 10 deletions(-) (limited to 'doc/html/FAQ.html') diff --git a/doc/html/FAQ.html b/doc/html/FAQ.html index 8b2fabc7..24e2cc57 100644 --- a/doc/html/FAQ.html +++ b/doc/html/FAQ.html @@ -65,8 +65,7 @@ VeraCrypt adds enhanced security to the algorithms used for system and partition It also solves many vulnerabilities and security issues found in TrueCrypt.
As an example, when the system partition is encrypted, TrueCrypt uses PBKDF2-RIPEMD160 with 1000 iterations whereas in VeraCrypt we use 327661. And for standard containers and other partitions, TrueCrypt uses at most 2000 iterations but VeraCrypt uses -655331 for RIPEMD160 and -500000 iterations for SHA-2 and Whirlpool.
+500000 iterations.
This enhanced security adds some delay only to the opening of encrypted partitions without any performance impact to the application use phase. This is acceptable to the legitimate owner but it makes it much harder for an attacker to gain access to the encrypted data. @@ -524,14 +523,6 @@ volume header and if it fails, it attempts to decrypt the area within the vo use the password typed in the 'Current Password' field.)

-When I use HMAC-RIPEMD-160, is the size of the header encryption key only 160 bits?
-
-No, VeraCrypt never uses an output of a hash function (nor of a HMAC algorithm) directly as an encryption key. See the section - -Header Key Derivation, Salt, and Iteration Count in the -documentation for more information.
-
-
How do I burn a VeraCrypt container larger than 2 GB onto a DVD?

The DVD burning software you use should allow you to select the format of the DVD. If it does, select the UDF format (ISO format does not support files larger than 2 GB).
-- cgit v1.2.3