Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 22 Jul 2009 16:13:01 +0300
From:      Gleb Kurtsou <gleb.kurtsou@gmail.com>
To:        soc-status@freebsd.org
Subject:   pefs status reports 6, 7
Message-ID:  <20090722131301.GA1771@tops>

next in thread | raw e-mail | index | archive | help
It seems I've forgotten to submit status report last week.  Actually too
much has changed during this time, here is short list of changes (from
commit logs):
- Add support for multiply keys per filesystem
- Replace sbin/mount_pefs with sbin/pefs (it also installs link to
  /sbin/mount_pefs)
- Configuration utility is capable of mounting/unmounting filesystems,
  adding/deleting keys
- Add initial support for other cipher implementations (next candidate is
  skein, but most of stream ciphers based on hash function should fit)
- Use salsa20 for encryption
- Remove all cipher block alignment handling bloat
- Implement key generation function (using salsa20)
- Use uma zones for cryptographically sensitive info (to bzero memory
  before free)
- Add transparent mode. Emulate read-only filesystem if no keys specified
- Add key reference counting and locking
- Support nodes without keys

Next item on my todo list is fixing readdir and adding key chaining.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20090722131301.GA1771>