bugtraq - Update on the PGP NTFS File Wipe Issue, 16 Dec 2005

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Fri, 16 Dec 2005 14:00:58 -0800
From: Jon Callas <jon@....com>
To: bugtraq@...urityfocus.com
Cc: Jon Callas <jon@....com>
Subject: Update on the PGP NTFS File Wipe Issue, 16 Dec 2005

We have verified the problem; with an NTFS volume and Windows XP,  
free space wiping of slack after the end of a file but before the end  
of the cluster does not occur correctly with Windows XP and NTFS. It  
does work correctly with NTFS under Windows 2000, or with Windows XP  
and another file system such as FAT32. It also works correctly when  
using the file shredding functionality. This issue affected only the  
volume-level free space wiping.

We have created a fix for this issue, and the fix has pass both our  
own tests and independent testing by Vinnie Liu. We are now preparing  
PGP Desktop 9.0.4 that includes this fix. We expect to release PGP  
Desktop 9.0.4 next Wednesday, 21 Dec 2005.

	Jon

-- 
Jon Callas
CTO, CSO
PGP Corporation         Tel: +1 (650) 319-9016
3460 West Bayshore      Fax: +1 (650) 319-9001
Palo Alto, CA 94303     PGP: ed15 5bdf cd41 adfc 00f3
USA                          28b6 52bf 5a46 bc98 e63d

________________________________________________________________
This message could have been secured by PGP Universal. To secure
future messages from this sender, please click this link:

https://keys.pgp.com/b/b.e?r=bugtraq%40securityfocus.com&n=PJ9X8B3iNqa2D%2F6sI5Yy4A%3D%3D