Jonáš Vidra wrote:
Dne Thu, 03 Dec 2009 02:27:32 +0100 drwowe <drwowe@xxxxxxxxx> wrote:
hello,
What is the status of the cryptcompress feature? Is it stable enough
for
desktop use, or only for experimentation?
Compression works and is stable,
The last complaint was on fsck ~1 yeah ago. Fixed.
encryption is not implemented and it seems it never will be.
Actually it is implemented on a low level. Moreover,
long time ago I got a reiser4 partition transparently
compressed and ciphered by aes ecb. The problem
was that Linux didn't have a good key manager. Now
I believe that the situation is improved, so in order to
announce encryption we need:
1. a fast iv-generator stable to watermark attack for
cbc encryption mode;
2. to adjust any convenient key manager to perform
encryption per file/directory/volume.
I estimate the complexity of this task as 2 of 5.
Thanks,
Edward.
Also, is there any documentation that explains how to use the
feature? I
seem to recall there was a mount options that turns it on, but also
to use
it I need to know how to do key management for encrypting files which I
haven't found.
For compression, just format the FS with -o create=ccreg40.
I also recommend setting hash to tea, since r5 hashing usually generates
collisions for me, especially when compiling big stuff like GCC or
OO.org,
leading to minor corruptions requiring an offline fsck.
--
To unsubscribe from this list: send the line "unsubscribe reiserfs-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
