PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

A glimpse of ext4 filesystem-level encryption

blog.quarkslab.com | research | #linux | #android | #cryptography | #encryption | #filesystem | #ext4
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A peek at ext4 filesystem-level encryption in Linux 4.1: Google's per-directory scheme, the ext4-crypt userspace tool, and why the author calls the implementation unstable and not production-ready.
Published
Collected

Related coverage

research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · blog.quarkslab.com
Android Data Encryption in depth
An in-depth study of Android data-at-rest encryption: how it works, which components attackers with high-end software vulnerabilities target, and PoCs against TrustZone Gatekeeper and Weaver.
research · bughunters.google.com
Google's PageBreak Project – Real-World Findings
This post provides a technical deep dive into specific, real-world vulnerabilities discovered by Google's PageBreak scanner
research · yeswehack.com
Junior devs ‘can’t actually code’, AI coding risks, security researchers decry inscrutable AI – OffSec roundup for CISOs
CISO roundup: junior devs' over-reliance on AI coding assistants sparks debate; researchers decry inscrutable AI; the UK iCloud encryption downgrade raises privacy fears; AI red-teaming lessons.
research · eshard.com
Evaluating Botan’s Resistance to Physical Attacks: An End-to-End Study
We evaluated Botan 3.7.1’s ECC against side-channel attacks, from source code to real hardware. Three attack paths found. Accepted at HS3 2026.
Back