From mboxrd@z Thu Jan  1 00:00:00 1970
From: "Li Wang" <dragonylffly@163.com>
Subject: [RFC] eCryptfs file system with HMAC verification
Date: Tue, 10 Apr 2012 21:22:24 +0800
Message-ID: <000301cd171c$f8bb4cc0$ea31e640$@com>
Mime-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
Cc: <linux-kernel@vger.kernel.org>, <ecryptfs@vger.kernel.org>,
	<linux-fsdevel@vger.kernel.org>
To: "Tyler Hicks" <tyhicks@canonical.com>,
	<dustin.kirkland@gazzang.com>, <torvalds@linux-foundation.org>,
	<akpm@linux-foundation.org>
Return-path: <ecryptfs-owner@vger.kernel.org>
Content-Language: zh-cn
Sender: ecryptfs-owner@vger.kernel.org
List-Id: linux-fsdevel.vger.kernel.org

Hi,
  we have implemented a prototype, which equips eCryptfs with HMAC verification,
based on the kernel crypto API. This enables eCryptfs to detect unauthorized (cipher) 
data modification and unexpected data corruption. And the preliminary experiments 
demonstrate the decrease in throughput is modest. As a file system highlighting security,
we think it should be useful.
  Any comments/suggestions are welcome.

Cheers,
Li Wang