SUMMARY: Crypting filesystem

From: Mika Tuupola (tuupola@appelsiini.net)
Date: Mon Jan 25 1999 - 15:06:14 CST


        Thank you to everyone who answered:

        Craig Raskin <raskin@compusec.org>
        Bob Radvanovsky <rsradvan@i3cs.com>
        Carl Carpenter <carlc@hgsi.com>
        Kevin Sheehan - Uniq <u-kevin@megami.veritas.com>
        Ralph Finch <rfinch@dop.water.ca.gov>
        Eric D. Pancer <eric@outlook.net>
        Timothy Lorenc <lorenct@load.com>
        Reto Lichtensteiger <rali@meitca.com>
        Scott D. Yelich <scott@scottyelich.com>

        The original question:

        I'm looking for software package for crypting filesystem
        in device or directory basis. Any suggestions?

        The solution:

        People suggested a couple of possibilities. The one which I used
        was CFS (Cryptographic File System). CFS can be found from
        http://www.cryptography.org/ under the 'disk' catefory.

        Note that CFS is under US export laws and you'll propably
        compromise US national security if you download it from there
        so you should find alternate site if youre not US citizen.
        ftp://idea.sec.dsi.unimi.it/ might be a good place to start.

        There is one slight problem with CFS. The package will compile
        and install a binary named ssh, the same as Secure SHell (the
        crypted 'telnet' client). I renamed the ssh which came with CFS.

        On the otherhand CFS was easy to install and I got it working
        without any hassles.

        
        Other suggestions were:
        
        TCFS (Transparent Cryptography File System), which can be
        found at http://vales.uni.net/tcfs/
        
        LOFS (LOopback File System), which is bundled with solaris.
        
        rsync + ssh combination, which propably works but seems
        a bit kludgish to my taste.

        AFS (Andrew File System), didn't do any research on this. Check
        http://www.cis.ohio-state.edu/hypertext/faq/usenet/afs-faq/faq.html
        
        http://www.datafellows.com/ also has something in 'Protection of
        Confidential files' section. Didn't check that out though.

-- 
Mika Tuupola                    	       tuupola@appelsiini.net
Appelsiini Networks                        http://www.appelsiini.net/ 



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:13:14 CDT