From owner-freebsd-hackers@FreeBSD.ORG Thu Jun 26 12:20:57 2003 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2A71F37B405 for ; Thu, 26 Jun 2003 12:20:57 -0700 (PDT) Received: from laptop.tenebras.com (laptop.tenebras.com [66.92.188.18]) by mx1.FreeBSD.org (Postfix) with SMTP id 3420543FBF for ; Thu, 26 Jun 2003 12:20:53 -0700 (PDT) (envelope-from kudzu@tenebras.com) Received: (qmail 46873 invoked from network); 26 Jun 2003 19:20:52 -0000 Received: from sapphire.tenebras.com (HELO tenebras.com) (192.168.188.241) by 0 with SMTP; 26 Jun 2003 19:20:52 -0000 Message-ID: <3EFB4792.5080805@tenebras.com> Date: Thu, 26 Jun 2003 12:20:50 -0700 From: Michael Sierchio User-Agent: Mozilla/5.0 (X11; U; Linux i386; en-US; rv:1.3.1) Gecko/20030425 X-Accept-Language: en-us, zh-tw, zh-cn, fr, en, de-de MIME-Version: 1.0 To: Peter B References: <200306261451.h5QEpaP12720@brother.ludd.luth.se> In-Reply-To: <200306261451.h5QEpaP12720@brother.ludd.luth.se> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-fs@freebsd.org cc: freebsd-hackers@freebsd.org Subject: Re: Encrypted filesystems X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Jun 2003 19:20:57 -0000 Peter B wrote: > I have searched for encrypted filesystems for un*x. Is there any better > encrypted filesystems than the ones I have found for *bsd (+freebsd)..? For per-file encryption, cryptfs/FiST is a good place to start. > I'm looking for something convinient to enrypt cdrom's. Which will also suit > dvd-r media. It should preferable be portable and not require specific kernel > hacks. To ensure feature stability & availability. Stackable virtual filesystems seem to be your friend. > Which operating systems manage to effectivly to use encrypted swap..? That's quite a different problem -- Poul-Henning Kamp's done work in GEOM based disk encryption which is directly applicable to encrypting swap. Key management is always interesting. -- "Well," Brahma said, "even after ten thousand explanations, a fool is no wiser, but an intelligent man requires only two thousand five hundred." - The Mahabharata