[lkml]   [1997]   [Feb]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRE: Encrypted "virtual" disk
Unless I'm missing something, the loop device does exactly what you want 
(except for the timed auto-unmount). It used to have a deadlock bug, but I
fixed that for 2.0.0. It still has a minor performance problem, but I've
sent a patch to Linus--maybe it'll get in someday......

From: on Mon, Feb 10, 1997 6:03 PM
Subject: z-Encrypted "virtual" disk


I am interested in writing a cryptographic "virtual" disk or filesystem.
My goals/ideas are the following:

o To be able to create/mount/unmount files (fixed size) as encrypted
disks, or some other scheme to avoid actually having to partition.
Using files has the advantage of piggybacking off the already existing
fs code and allowing encrypted disks on any fs.

o Not being required to create a physical partition is critical. An
arbitrary number of encrypted disks, easy to create, should be possible.

o The crypto-fs code would require a passphrase upon mounting. It would
be nice to auto-unmount after a period of time specified by mount.

o When a file is read by something in user-space, the crypto-fs
maps the request to some part of the file as it exists in the mind
of the underlying "real" file system, reads the requested portion,
and then decrypts it.

o Writing works much the same way, encrypting before "really" writing.

I'm starting to pilfer through the exising fs code now. If anyone has
suggestions, pointers, a better design meeting the basic goals, etc,
please contact me. Unfortunately, I am in the U.S., and given the
asshole export laws, this will not be exportable (legally). If anything
like this has already been done, please point me there. Thanks.

- --
Jeremey Barrett VeriWeb Internet Corp.
Senior Software Engineer

PGP Key fingerprint = 3B 42 1E D4 4B 17 0D 80 DC 59 6F 59 04 C3 83 64

Version: 2.6.2
Comment: Processed by Mailcrypt 3.4, an Emacs/PGP interface


 \ /
  Last update: 2005-03-22 13:38    [W:0.025 / U:1.224 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site