Date: Sat, 22 Aug 2009 15:16:47 +0300 From: Gleb Kurtsou <gleb.kurtsou@gmail.com> To: soc-status@freebsd.org Cc: Stanislav Sedov <stas@FreeBSD.org> Subject: pefs final report Message-ID: <20090822121647.GA52160@tops>
next in thread | raw e-mail | index | archive | help
Last week I've changed file name checksum algorithm from HMAC to VMAC. VMAC is much faster and produces 64bit mac and there is no longer need to truncate HMAC output. I've also changed hand rolled KDF implementation into HKDF one which use HMAC to derivate keys. Also note that I use mac algorithms for integrity checks only, there is no authentication provided by pefs (the same way most of other such filesystems do). I hope that was a final change of crypto primitives and filesystem format would remain stable. Generally, pefs is functional and behaves as it should, all of the initial project goals were completed. There are some issue to work on though. Most important one being implementation of file name encryption cache. Current implementation performs readdir on almost every vnode lookup not found in iname cache. It degrades performance seriously.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20090822121647.GA52160>