Encrypted filesystem

[cybermike_dk]

Does such a thing exist? and how does it works?
what about performance? what kind of encryption does it use? how secure is it? how does it store the key?


Can anybody give me some answers?

[zxtech]

They DO exist, here is some info:

for windows there is:
Secure FileSystem (SFS) for DOS/Windows
availble at: http://www.cs.auckland.ac.nz/~pgut001/sfs/index.html

for linux there are the following:

CFS
CFS is a way of encrypting entire directory trees and allowing users to store encrypted files on them. It uses an NFS server running on the local machine and is quite slow due to the nature of the program and algorithms used. More information is available at :
ftp://ftp.zedz.net/pub/crypto/disk/cfs/
or
ftp://ftp.research.att.com/dist/mab/


TCFS
TCFS is an improvement on CFS, but unlike CFS requires kernel patches. It is also only available for the outdated 2.0.x kernels. More information is available in the TCFS FAQ
More info at
http://tcfs.dia.unisa.it/tcfs-faq.html

The Loopback Encrypted Filesystem HOWTO describes another loopback filesystem kernel patch. Many types of encryption can be used, including DES, twofish, blowfish, IDEA, and others.
http://www.kerneli.org/loopback-encr...ilesystem.html

Hope This Helps

chris@zxtech.net
www.zxtech.net
ZXtech UNIX Hosting

[jansson_markus]

Is it possible to somehow encrypt the content of your entire HDD:s in such way that you would need to boot from a floppy and get the keys out of the floppy and decrypt them with your passphrase? And then go on loading OS and keeping the content of HDD:s always encrypted?

Kinda like Scramdisk or PGPdisk but somehow you would have to be able to "keep" the key to open them in your computers memory and not let Windows kill it off there at any time.

Can it be done or is hardware solution needed?

[cybermike_dk]

I haven´t checked all the links yet, but i was thinking of something like this:

download a file e.g. rsafs.o

insmod rsafs.o
mkefs.rsa /dev/hde1

and then put the following in fstab

/dev/hde1 rsafs ..... an so on


But as i tould you, havent checked all the links yet :=)