From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Li Wang" Subject: [RFC] eCryptfs file system with HMAC verification Date: Tue, 10 Apr 2012 21:26:58 +0800 Message-ID: <534063324.06707@eyou.net> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Cc: , , To: "Tyler Hicks" , , , Return-path: Message-ID: <000a01cd171d$9e6c23b0$db446b10$@edu.cn> Content-Language: zh-cn Sender: ecryptfs-owner@vger.kernel.org List-Id: linux-fsdevel.vger.kernel.org Hi, we have implemented a prototype, which equips eCryptfs with HMAC verification, based on the kernel crypto API. This enables eCryptfs to detect unauthorized (cipher) data modification and unexpected data corruption. And the preliminary experiments demonstrate the decrease in throughput is modest. As a file system highlighting security, we think it should be useful. Any comments/suggestions are welcome. Cheers, Li Wang From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Li Wang" Subject: [RFC] eCryptfs file system with HMAC verification Date: Tue, 10 Apr 2012 21:26:58 +0800 Message-ID: <000a01cd171d$9e6c23b0$db446b10$__12058.5802979351$1334064454$gmane$org@edu.cn> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Cc: , , To: "Tyler Hicks" , , , Return-path: Received: from mail.nudt.edu.cn ([61.187.54.11]:45197 "HELO eyou.net" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with SMTP id S1752856Ab2DJN1R (ORCPT ); Tue, 10 Apr 2012 09:27:17 -0400 Message-ID: <000a01cd171d$9e6c23b0$db446b10$@edu.cn> Content-Language: zh-cn Sender: linux-fsdevel-owner@vger.kernel.org List-ID: Hi, we have implemented a prototype, which equips eCryptfs with HMAC verification, based on the kernel crypto API. This enables eCryptfs to detect unauthorized (cipher) data modification and unexpected data corruption. And the preliminary experiments demonstrate the decrease in throughput is modest. As a file system highlighting security, we think it should be useful. Any comments/suggestions are welcome. Cheers, Li Wang From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Li Wang" Subject: [RFC] eCryptfs file system with HMAC verification Date: Tue, 10 Apr 2012 21:26:58 +0800 Message-ID: <000a01cd171d$9e6c23b0$db446b10$__30431.7194190391$1334064457$gmane$org@edu.cn> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Cc: , , To: "Tyler Hicks" , , , Return-path: Message-ID: <000a01cd171d$9e6c23b0$db446b10$@edu.cn> Content-Language: zh-cn Sender: linux-kernel-owner@vger.kernel.org List-Id: linux-fsdevel.vger.kernel.org Hi, we have implemented a prototype, which equips eCryptfs with HMAC verification, based on the kernel crypto API. This enables eCryptfs to detect unauthorized (cipher) data modification and unexpected data corruption. And the preliminary experiments demonstrate the decrease in throughput is modest. As a file system highlighting security, we think it should be useful. Any comments/suggestions are welcome. Cheers, Li Wang