Re: Proposal for keying encrypted filesystem

[Hans Reiser <reiser@namesys.com>]

Pierre Abbat wrote:

>On Tuesday 01 April 2003 11:21, Hans Reiser wrote:
>  
>
>>I think it is essential to the task that apps not be aware of keys.
>>    
>>
>
>Indeed. The reiser4-specific syscall should insert or delete a key into the 
>database;
>
why?

> to open a file you use the generic open() syscall, which passes the 
>filename to reiser4, which then asks the plugin if it has the key, and fails 
>if it doesn't. The only time you should need to use a reiser4-specific call 
>to open a file is when you need to read or write the ciphertext, which Bob 
>needs to do when he backs up to tape (or another disk) the data which Alice 
>backed up to him. This also needs special read and write calls, as you need 
>to know how long each block (stored as a tail) is, because it's compressed.
>
>I'd also like to see some other protocols using an encrypted filesystem, 
>especially ones using public key, as I don't understand why you need public 
>key encryption in a filesystem.
>
>phma
>  
>


-- 
Hans