Hello everyone,
I have already implemented a common solution for distributed systems
with detection
of tampering on non-trusted servers:
http://www.gluster.org/community/documentation/index.php/Features/disk-encryption
It also works for a local file system: just deploy GlusterFS on the
single brick.
GlusterFS can not be deployed on reiser4 though (because of lack of xattrs).
Native solution for encryption in reiser4 is implemented on 90%.
One just needs to call a proper cipher transform (AES-XTS) at
inflate/deflate_cluster(),
and add key management bits.
Decryption is going at ->readpage(s) time. Encryption is going only at
commit time
(right before writing data to disk).
Thanks,
Edward.
On 04/20/2015 11:00 AM, † wrote:
Hi.
There's ext4 filesystem-level encryption support pushed for upcoming 4.1 kernel. As
far as I recall there's been talks about possibility of sharing some of that code to
implement similar feature for f2fs as well.
I wonder if it could be possible to reuse this code to get fs-level encryption for R4
too? Or maybe there's already crypto implementation which I've overlooked?
cheers,
Max.
--
To unsubscribe from this list: send the line "unsubscribe reiserfs-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
--
To unsubscribe from this list: send the line "unsubscribe reiserfs-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html