Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 26 Jun 2003 19:35:11 -0400
From:      Erez Zadok <ezk@cs.sunysb.edu>
To:        Michael Sierchio <kudzu@tenebras.com>
Cc:        Peter B <pb@ludd.luth.se>
Subject:   Re: Encrypted filesystems 
Message-ID:  <200306262335.h5QNZBNF003209@agora.fsl.cs.sunysb.edu>
In-Reply-To: Your message of "Thu, 26 Jun 2003 12:20:50 PDT." <3EFB4792.5080805@tenebras.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
In message <3EFB4792.5080805@tenebras.com>, Michael Sierchio writes:
> Peter B wrote:
[...]
> > Which operating systems manage to effectivly to use encrypted swap..?
> 
> That's quite a different problem -- Poul-Henning Kamp's done work
> in GEOM based disk encryption which is directly applicable to
> encrypting swap.  Key management is always interesting.

You might check the work/papers by Niels Provos on encrypted swap.

We've been working on this problem for our NCryptfs.  To provide a
comprehensive solution, we have to also handle swap.  Luckily in Linux,
there are specific VOPs and APIs that make it easy to hook a crypto f/s w/
the swap.

Erez.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200306262335.h5QNZBNF003209>