* fs-level crypto
@ 2015-04-20 9:00 †
2015-04-20 11:35 ` Edward Shishkin
0 siblings, 1 reply; 2+ messages in thread
From: † @ 2015-04-20 9:00 UTC (permalink / raw)
To: reiserfs-devel
Hi.
There's ext4 filesystem-level encryption support pushed for upcoming 4.1 kernel. As
far as I recall there's been talks about possibility of sharing some of that code to
implement similar feature for f2fs as well.
I wonder if it could be possible to reuse this code to get fs-level encryption for R4
too? Or maybe there's already crypto implementation which I've overlooked?
cheers,
Max.
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: fs-level crypto
2015-04-20 9:00 fs-level crypto †
@ 2015-04-20 11:35 ` Edward Shishkin
0 siblings, 0 replies; 2+ messages in thread
From: Edward Shishkin @ 2015-04-20 11:35 UTC (permalink / raw)
To: †, reiserfs-devel
Hello everyone,
I have already implemented a common solution for distributed systems
with detection
of tampering on non-trusted servers:
http://www.gluster.org/community/documentation/index.php/Features/disk-encryption
It also works for a local file system: just deploy GlusterFS on the
single brick.
GlusterFS can not be deployed on reiser4 though (because of lack of xattrs).
Native solution for encryption in reiser4 is implemented on 90%.
One just needs to call a proper cipher transform (AES-XTS) at
inflate/deflate_cluster(),
and add key management bits.
Decryption is going at ->readpage(s) time. Encryption is going only at
commit time
(right before writing data to disk).
Thanks,
Edward.
On 04/20/2015 11:00 AM, †wrote:
> Hi.
>
> There's ext4 filesystem-level encryption support pushed for upcoming 4.1 kernel. As
> far as I recall there's been talks about possibility of sharing some of that code to
> implement similar feature for f2fs as well.
>
> I wonder if it could be possible to reuse this code to get fs-level encryption for R4
> too? Or maybe there's already crypto implementation which I've overlooked?
>
> cheers,
> Max.
>
> --
> To unsubscribe from this list: send the line "unsubscribe reiserfs-devel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
--
To unsubscribe from this list: send the line "unsubscribe reiserfs-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2015-04-20 11:35 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2015-04-20 9:00 fs-level crypto †
2015-04-20 11:35 ` Edward Shishkin
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.