Skip to content

eCryptfs: Public key support

Michael Halcrow lkml 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest4 patches 14 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/4eCryptfs: Netlink functions for public keyfs/ecryptfs/ecryptfs_kernel.h fs/ecryptfs/messaging.c fs/ecryptfs/netlink.c +1 more+861 -53 replies
2/4eCryptfs: Public key header packetsfs/ecryptfs/Makefile fs/ecryptfs/keystore.c fs/ecryptfs/main.c +1 more+768 -1680 replies
3/4eCryptfs: Open-code flag manipulationfs/ecryptfs/crypto.c fs/ecryptfs/debug.c fs/ecryptfs/ecryptfs_kernel.h +5 more+58 -821 reply
4/4eCryptfs: ino_t to u64 for filldirfs/ecryptfs/file.c+1 -110 replies

Reviews trailers per patch

2 of 4 patches have a Reviewed-by or Acked-by.

PatchDavid Howells
1/4
2/4
3/4A-b
4/4A-b A-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v1 thread

Cover letter [PATCH 0/4] eCryptfs: Public key support

This first two patches in this patch set introduce public key support into the eCryptfs kernel module shipping in 2.6.18-rc4-mm2. The last two patches clean up the flag manipulation code and resolve a compiler warning.

The userspace code that supports the public key mode of operation is available in the file labeled ``ecryptfs-util-2.6.18-rc4-mm2++.tar.bz2'':

http://sourceforge.net/project/showfiles.php?group_id=133988&package_id=149785

Notice that the version numbers are incremented; the userspace tools must be upgraded when running with this patch set. Follow the file migration instructions in the NOTES section of Documentation/ecryptfs.txt.

On open of an existing encrypted file, eCryptfs reads the public key packet from the file header and sends a decrypt request packet via netlink to the user's daemon. If the file is being created, eCryptfs sends an encrypt request. The daemon processes the request through the pluggable PKI module associated with the public key involved in the request.

For those who wish to try out eCryptfs on older kernels, we are also keeping backports of eCryptfs in packages under the ``ecryptfs-full'' release section:

http://sourceforge.net/project/showfiles.php?group_id=133988&package_id=198555

Mike