You're right. I was snippy, and in a particularly dumb way. Sorry about that.

But happy to admit it in a reasonable way. A responsible disclosure of errors if you will.

eh, no need to apologise. i think we're used to you here and there's a level of tolerance given the contributions you make.

also, did you see http://www.jakoblell.com/blog/2013/12/22/practical-malleabil... which i think could be added to an early crypto challenge? (but maybe you already cover the idea).

CBC bitflipping is in set #2. Incidentally, somewhere in the mists of time is a very weird blog post ("If You're Typing The Letters A-E-S Into Your Code, You're Doing It Wrong") I wrote describing how to implement this attack --- though not against LUKS.