eCryptfs version 0.1
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest12 patches 29 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/12 | Makefile and Kconfig/ / | +11 | 7 replies | |
| 2/12 | DocumentationDocumentation/ | +55 | 0 replies | |
| 3/12 | Makefilefs/ | +7 | 0 replies | |
| 4/12 | Main module functionsfs/ | +973 | 6 replies | |
| 5/12 | Header declarationsfs/ | +523 | 1 reply | |
| 6/12 | Superblock operationsfs/ | +246 | 1 reply | |
| 7/12 | File operationsfs/ | +708 | 1 reply | |
| 8/12 | Dentry operationsfs/ | +110 | 0 replies | |
| 9/12 | Inode operationsfs/ | +1492 | 3 replies | |
| 10/12 | Mmap operationsfs/ | +1045 | 2 replies | |
| 11/12 | Keystorefs/ | +860 | 3 replies | |
| 12/12 | Crypto functionsfs/ | +822 | 5 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [PATCH 0/12: eCryptfs] eCryptfs version 0.1
This set of patches constitutes eCryptfs version 0.1. We are presenting it to be reviewed and considered for inclusion into the kernel.
eCryptfs is a stackable filesystem that is based off of the Cryptfs that is generated by the FiST stackable filesystem framework written by Erez Zadok:
eCryptfs stores cryptographic metadata in the headers of each file; the headers contain OpenPGP-like packets (see RFC 2440). This allows the encrypted underlying files to be copied between hosts, and all of the information necessary to decrypt the files stays with the files themselves. eCryptfs aims to make the encryption and the decryption of each individual file completely transparent to userspace applications, so long as the recipient has the requisite key or passphrase to access the file available.
Michael Halcrow presented eCryptfs at the 2004 and the 2005 Ottawa Linux Symposiums; the high-level overview from this year's symposium starts on page 209 of the first half of the symposium proceedings:
http://www.linuxsymposium.org/2005/linuxsymposium_procv1.pdf
Note that this set of patches contains a considerably trimmed-down version of eCryptfs than what was sent to the LKML earlier this year. Release 0.1 includes mount-wide passphrase support only; this will make eCryptfs easier to analyze and debug before the more advanced policy and public key features are merged in.
eCryptfs performs well under a variety of tests, including FSX and Connectathon (Basic and General functional). There is a bug that crops up on a kernel compile. We would appreciate any insight that the VFS guru's could give us in tracking down and fixing any extant bugs.
eCryptfs utilizes David Howells' keyring; at mount, eCryptfs version 0.1 expects an existing authentication token in the user's session keyring. The tarball containing the code to do this is available from the eCryptfs SourceForge site (ecryptfs-v0_1.tar.bz2):
http://sourceforge.net/projects/ecryptfs/
Future releases will have policy support, which will entail per-file passphrase and per-file public key support. Those who are interested in looking at that code are welcome to obtain it from the eCryptfs CVS repository on SourceForge:
cvs -d:pserver:[email protected]:/cvsroot/ecryptfs login cvs -z3 -d:pserver:[email protected]:/cvsroot/ecryptfs \
co -P ecryptfs
Phillip