fs-level crypto

fs-level crypto

[†]

Hi.

There's ext4 filesystem-level encryption support pushed for upcoming 4.1 kernel. As
far as I recall there's been talks about possibility of sharing some of that code to
implement similar feature for f2fs as well.

I wonder if it could be possible to reuse this code to get fs-level encryption for R4
too? Or maybe there's already crypto implementation which I've overlooked?

cheers,
Max.

Re: fs-level crypto

[Edward Shishkin]

Hello everyone,

I have already implemented a common solution for distributed systems 
with detection
of tampering on non-trusted servers:
http://www.gluster.org/community/documentation/index.php/Features/disk-encryption

It also works for a local file system: just deploy GlusterFS on the 
single brick.
GlusterFS can not be deployed on reiser4 though (because of lack of xattrs).

Native solution for encryption in reiser4 is implemented on 90%.
One just needs to call a proper cipher transform (AES-XTS) at 
inflate/deflate_cluster(),
and add key management bits.
Decryption is going at ->readpage(s) time. Encryption is going only at 
commit time
(right before writing data to disk).

Thanks,
Edward.


On 04/20/2015 11:00 AM, † wrote:
> Hi.
>
> There's ext4 filesystem-level encryption support pushed for upcoming 4.1 kernel. As
> far as I recall there's been talks about possibility of sharing some of that code to
> implement similar feature for f2fs as well.
>
> I wonder if it could be possible to reuse this code to get fs-level encryption for R4
> too? Or maybe there's already crypto implementation which I've overlooked?
>
> cheers,
> Max.
>
> --
> To unsubscribe from this list: send the line "unsubscribe reiserfs-devel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html

--
To unsubscribe from this list: send the line "unsubscribe reiserfs-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html