Cryptocompress

Cryptocompress

[drwowe]

hello,
What is the status of the cryptcompress feature?  Is it stable enough for
desktop use, or only for experimentation?
Also, is there any documentation that explains how to use the feature?  I
seem to recall there was a mount options that turns it on, but also to use
it I need to know how to do key management for encrypting files which I
haven't found.
-- 
View this message in context: http://old.nabble.com/Cryptocompress-tp26619602p26619602.html
Sent from the ReiserFS - General mailing list archive at Nabble.com.

Re: Cryptocompress

[Jonáš Vidra]

Dne Thu, 03 Dec 2009 02:27:32 +0100 drwowe <drwowe@yahoo.com> wrote:

>
> hello,
> What is the status of the cryptcompress feature?  Is it stable enough for
> desktop use, or only for experimentation?

Compression works and is stable, encryption is not implemented and it  
seems it never will be.


> Also, is there any documentation that explains how to use the feature?  I
> seem to recall there was a mount options that turns it on, but also to  
> use
> it I need to know how to do key management for encrypting files which I
> haven't found.

For compression, just format the FS with -o create=ccreg40.
I also recommend setting hash to tea, since r5 hashing usually generates
collisions for me, especially when compiling big stuff like GCC or OO.org,
leading to minor corruptions requiring an offline fsck.

-- 
Jonáš Vidra, vidra.jonas@seznam.cz
--
To unsubscribe from this list: send the line "unsubscribe reiserfs-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: Cryptocompress

[Edward Shishkin]

Jonáš Vidra wrote:
> Dne Thu, 03 Dec 2009 02:27:32 +0100 drwowe <drwowe@yahoo.com> wrote:
>
>>
>> hello,
>> What is the status of the cryptcompress feature?  Is it stable enough 
>> for
>> desktop use, or only for experimentation?
>
> Compression works and is stable,

The last complaint was on fsck ~1 yeah ago. Fixed.

> encryption is not implemented and it seems it never will be.

Actually it is implemented on a low level. Moreover,
long time ago I got a reiser4 partition transparently
compressed and ciphered by aes ecb. The problem
was that Linux didn't have a good key manager. Now
I believe that the situation is improved, so in order to
announce encryption we need:

1. a fast iv-generator stable to watermark attack for
    cbc encryption mode;
2. to adjust any convenient key manager to perform
    encryption per file/directory/volume.

I estimate the complexity of this task as 2 of 5.

Thanks,
Edward.

>
>
>
>> Also, is there any documentation that explains how to use the 
>> feature?  I
>> seem to recall there was a mount options that turns it on, but also 
>> to use
>> it I need to know how to do key management for encrypting files which I
>> haven't found.
>
> For compression, just format the FS with -o create=ccreg40.
> I also recommend setting hash to tea, since r5 hashing usually generates
> collisions for me, especially when compiling big stuff like GCC or 
> OO.org,
> leading to minor corruptions requiring an offline fsck.
>

--
To unsubscribe from this list: send the line "unsubscribe reiserfs-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html