From owner-freebsd-hackers@FreeBSD.ORG  Thu Jun 26 16:35:15 2003
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 30B0937B401; Thu, 26 Jun 2003 16:35:15 -0700 (PDT)
Received: from filer.fsl.cs.sunysb.edu (filer.fsl.cs.sunysb.edu
	[130.245.126.2])	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 9E26F43FF5; Thu, 26 Jun 2003 16:35:13 -0700 (PDT)
	(envelope-from ezk@fsl.cs.sunysb.edu)
Received: from agora.fsl.cs.sunysb.edu
	(IDENT:uH1vLzWqD2R6OGEBmLwuTiUjaF/wq1y5@agora.fsl.cs.sunysb.edu
	[130.245.126.12])h5QNYrcq011259;	Thu, 26 Jun 2003 19:34:53 -0400
Received: from agora.fsl.cs.sunysb.edu
	(IDENT:cSvBBTTA/eVBdZqtrZBsgi4BVVp+0XC8@localhost.localdomain [127.0.0.1])
	h5QNZCif003213;	Thu, 26 Jun 2003 19:35:12 -0400
Received: (from ezk@localhost)
	by agora.fsl.cs.sunysb.edu (8.12.8/8.12.8/Submit) id h5QNZBNF003209;
	Thu, 26 Jun 2003 19:35:11 -0400
Date: Thu, 26 Jun 2003 19:35:11 -0400
Message-Id: <200306262335.h5QNZBNF003209@agora.fsl.cs.sunysb.edu>
From: Erez Zadok <ezk@cs.sunysb.edu>
To: Michael Sierchio <kudzu@tenebras.com>
In-reply-to: Your message of "Thu, 26 Jun 2003 12:20:50 PDT."
             <3EFB4792.5080805@tenebras.com> 
X-MailKey: Erez Zadok
cc: freebsd-fs@freebsd.org
cc: freebsd-hackers@freebsd.org
cc: cwright@cs.sunysb.edu
cc: Peter B <pb@ludd.luth.se>
Subject: Re: Encrypted filesystems 
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jun 2003 23:35:15 -0000

In message <3EFB4792.5080805@tenebras.com>, Michael Sierchio writes:
> Peter B wrote:
[...]
> > Which operating systems manage to effectivly to use encrypted swap..?
> 
> That's quite a different problem -- Poul-Henning Kamp's done work
> in GEOM based disk encryption which is directly applicable to
> encrypting swap.  Key management is always interesting.

You might check the work/papers by Niels Provos on encrypted swap.

We've been working on this problem for our NCryptfs.  To provide a
comprehensive solution, we have to also handle swap.  Luckily in Linux,
there are specific VOPs and APIs that make it easy to hook a crypto f/s w/
the swap.

Erez.