Encrypted filesystems

[Erez Zadok]

In message <3EFB4792.5080805 at tenebras.com>, Michael Sierchio writes:
> Peter B wrote:
[...]
> > Which operating systems manage to effectivly to use encrypted swap..?
> 
> That's quite a different problem -- Poul-Henning Kamp's done work
> in GEOM based disk encryption which is directly applicable to
> encrypting swap.  Key management is always interesting.

You might check the work/papers by Niels Provos on encrypted swap.

We've been working on this problem for our NCryptfs.  To provide a
comprehensive solution, we have to also handle swap.  Luckily in Linux,
there are specific VOPs and APIs that make it easy to hook a crypto f/s w/
the swap.

Erez.