Abstract

Although cryptographic techniques areplaying an increasingly important role in modern computing system security,userlevel tools for encrypting file data arecumbersome and suffer from a number of inherent vulnerabilities. The Cryptographic File System (CFS) pushes encryption services into the file system itself. CFS supports securestorage at the system level through a standardUnix file system interface to encrypted files. Users associate a cryptographic key with the directories they wish to protect. Files in these directories (as well as their pathname components) aretransparently encrypted and decrypted with the specified key without further user intervention; cleartext is never stored on a disk or sent to a remote file server.CFS can use any available file system for its underlying storage without modification, including remote file servers such as NFS. System management functions, such as file backup, work in a normal manner and without knowledge of the key. This paper describes the ...

Citations

760	Scale and performance in a distributed file system - Howard, Kazar, et al. - 1988
211	Vnodes: An Architecture for Multiple File System Types - Kleiman - 1986
133	A Proposal for a New Block Encryption Standard - Lai, Massey
4	CryptoLib: A C Library of Routines for Cryptosystems - Lacy, Mitchell, et al. - 1993
3	Security Issues in the Truffles File System - al - 1993