Abstract:
Data encryption has become an increasingly important factor in everyday work. Users seek a method of securing their data with maximum comfort and minimum additional requirements on their part; they want a security system that protects any files used by any of their applications, without resorting to application-specific encryption methods. Performance is an important factor to users since encryption can be time consuming. Operating system vendors want to provide this functionality but without incurring the large costs of developing a new file system. This paper describes the design and implementation of Cryptfs --- a file system that was designed as a stackable Vnode layer loadable kernel module[5, 15, 19]. Cryptfs operates by "encapsulating" a client file system with a layer of encryption transparent to the user. Being kernel resident, Cryptfs performs better than user-level or NFS based file servers such as CFS[2] and TCFS[3]. It is 2 to 37 times faster on micro-benchmarks such as re...
Citations
|
541
|
The MD5 message-digest algorithm
– RIVEST
- 1992
|
|
444
|
A Fast File System for UNIX
– McKusick, Joy, et al.
- 1983
|
|
381
|
Design and implementation of the Sun Network File System
– Sandberg, Goldberg, et al.
- 1985
|
|
168
|
A cryptographic file system for UNIX
– Blaze
- 1993
|
|
150
|
File-System Development with Stackable Layers
– Heidemann, Popek
- 1992
|
|
105
|
Implementation of the Ficus Replicated File System
– Guy, Heidemann, et al.
- 1990
|
|
71
|
The Design and Implementation of a Transparent Cryptographic File System for UNIX. FREENIX
– Cattaneo, Catuogno, et al.
- 2001
|
|
29
|
Stacking" Vnodes: A Progress Report
– Skinner, Wong
- 1993
|
|
19
|
A layered approach to file system development
– Heidemann, Popek
- 1991
|
|
19
|
Union Mounts in 4.4BSD-Lite
– Pendry, McKusick
- 1995
|
|
17
|
The Data Encryption Standard: past and future
– Smid, Branstad
- 1988
|
|
7
|
A New Kernel Foundation for
– Mach
- 1986
|
|
7
|
Requirements for a "Stacking
– Rosenthal
- 1992
|
|
6
|
Algorithm Types and Modes
– Schneier
- 1996
|
|
6
|
FiST: A File System Component Compiler
– Zadok
- 1997
|
|
6
|
Requirements for a “Stacking” Vnode/VFS
– Rosenthal
- 1992
|
|
4
|
Am-utils (4.4BSD Automounter Utilities). User Manual, for Am-utils version 6.0a16
– Zadok
- 1998
|
|
3
|
An Overview of the Spring System
– Mitchel, Giobbons, et al.
- 1994
|
|
3
|
Truffles – a secure service for widespread file sharing
– Reiner, Page, et al.
- 1994
|
|
2
|
Available http://www.sunlabs.com/technicalreports /1996/abstract-57.html
– Matena, Khalidi, et al.
- 1996
|
|
1
|
Secure Encryption Challenged by Internet-Linked Computers
– McNett
- 1998
|
|
1
|
The Official PGP User’s Guide
– In
- 1995
|