From owner-freebsd-fs@FreeBSD.ORG  Thu Jun 26 16:48:36 2003
Return-Path: <owner-freebsd-fs@FreeBSD.ORG>
Delivered-To: freebsd-fs@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 8D3F837B401; Thu, 26 Jun 2003 16:48:36 -0700 (PDT)
Received: from critter.freebsd.dk (critter.freebsd.dk [212.242.86.163])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 6CAEB44013; Thu, 26 Jun 2003 16:48:35 -0700 (PDT)
	(envelope-from phk@phk.freebsd.dk)
Received: from critter.freebsd.dk (localhost [127.0.0.1])
	by critter.freebsd.dk (8.12.9/8.12.9) with ESMTP id h5QNmT1Y002584;
	Fri, 27 Jun 2003 01:48:30 +0200 (CEST)
	(envelope-from phk@phk.freebsd.dk)
To: Erez Zadok <ezk@cs.sunysb.edu>
From: "Poul-Henning Kamp" <phk@phk.freebsd.dk>
In-Reply-To: Your message of "Thu, 26 Jun 2003 19:35:11 EDT."
             <200306262335.h5QNZBNF003209@agora.fsl.cs.sunysb.edu> 
Date: Fri, 27 Jun 2003 01:48:29 +0200
Message-ID: <2583.1056671309@critter.freebsd.dk>
cc: freebsd-fs@freebsd.org
cc: freebsd-hackers@freebsd.org
cc: cwright@cs.sunysb.edu
cc: Peter B <pb@ludd.luth.se>
Subject: Re: Encrypted filesystems 
X-BeenThere: freebsd-fs@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Filesystems <freebsd-fs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-fs>,
	<mailto:freebsd-fs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-fs>
List-Post: <mailto:freebsd-fs@freebsd.org>
List-Help: <mailto:freebsd-fs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-fs>,
	<mailto:freebsd-fs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jun 2003 23:48:36 -0000

In message <200306262335.h5QNZBNF003209@agora.fsl.cs.sunysb.edu>, Erez Zadok wr
ites:
>In message <3EFB4792.5080805@tenebras.com>, Michael Sierchio writes:
>> Peter B wrote:
>[...]
>> > Which operating systems manage to effectivly to use encrypted swap..?
>> 
>> That's quite a different problem -- Poul-Henning Kamp's done work
>> in GEOM based disk encryption which is directly applicable to
>> encrypting swap.  Key management is always interesting.
>
>You might check the work/papers by Niels Provos on encrypted swap.
>
>We've been working on this problem for our NCryptfs.  To provide a
>comprehensive solution, we have to also handle swap.  Luckily in Linux,
>there are specific VOPs and APIs that make it easy to hook a crypto f/s w/
>the swap.

I will present a paper on the GBDE encrypted disk facility at BSDcon2003.

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk@FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.