Re: Cryptocompress

[Edward Shishkin <edward.shishkin@gmail.com>]

Jonáš Vidra wrote:
> Dne Thu, 03 Dec 2009 02:27:32 +0100 drwowe <drwowe@yahoo.com> wrote:
>
>>
>> hello,
>> What is the status of the cryptcompress feature?  Is it stable enough 
>> for
>> desktop use, or only for experimentation?
>
> Compression works and is stable,

The last complaint was on fsck ~1 yeah ago. Fixed.

> encryption is not implemented and it seems it never will be.

Actually it is implemented on a low level. Moreover,
long time ago I got a reiser4 partition transparently
compressed and ciphered by aes ecb. The problem
was that Linux didn't have a good key manager. Now
I believe that the situation is improved, so in order to
announce encryption we need:

1. a fast iv-generator stable to watermark attack for
    cbc encryption mode;
2. to adjust any convenient key manager to perform
    encryption per file/directory/volume.

I estimate the complexity of this task as 2 of 5.

Thanks,
Edward.

>
>
>
>> Also, is there any documentation that explains how to use the 
>> feature?  I
>> seem to recall there was a mount options that turns it on, but also 
>> to use
>> it I need to know how to do key management for encrypting files which I
>> haven't found.
>
> For compression, just format the FS with -o create=ccreg40.
> I also recommend setting hash to tea, since r5 hashing usually generates
> collisions for me, especially when compiling big stuff like GCC or 
> OO.org,
> leading to minor corruptions requiring an offline fsck.
>

--
To unsubscribe from this list: send the line "unsubscribe reiserfs-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html