Re: filesystem encryption

Kriston J. Rehberg (kriston@ibm.net)
Thu, 25 Jun 1998 16:42:03 -0400

• Next message: Tom Weinstein: "Re: timing attacks."
• Previous message: Eric Murray: "Re: Random seeds"
• In reply to: Perry E. Metzger: "Re: Random seeds"
• Next in thread: jcaldwel@iquest.net: "Re: filesystem encryption"
• Reply: jcaldwel@iquest.net: "Re: filesystem encryption"

I held out as long as I could for PGPdisk for Windows, and couldn't get
SFS to work with Windows 95, and finally found a working product in
SafeHouse (www.pcdynamics.com).

I'm interested to see an analysis of that product (SafeHouse), in fact,
but I don't have the means to do so myself.

Kris

Steve Schear wrote:
>
> At 1:52 PM -0400 6/24/98, Matt Blaze wrote:
> >My own experience with CFS is that, given modern (486 and later) processors,
> >multiple-megabyte memories, reasonable (cleartext-side) filesystem caching
> >algorithms, and typical (Unix, at least) user access patterms, ANY modern
> >cipher, even 3DES, is probably fine. I use CFS and 3DES for about half of my
> >home directory (which is NFS-mounted from a shared server), and I frankly
> >don't notice any difference between that and, say, SAFER (which CFS
> >also supports). The encypted directories are slower, but not so much
> >slower that I mind or especially notice.
> >
> >On the other hand, performance for an encrypted disk device driver might be
> >another story altogether.
>
> Will Price (now at PGP) did an excellent job, first with CryptDisk and
> later with PGPDisk. These are both device drivers and have good
> performance. Although both are for the Mac, the overall design decisions
> should be applicable to most platforms.
>
> PGPDisk has not gotten much publicity. Is the Windows version out yet?
> Does anyone know if the source to either is available. I'm sure it could
> be a boon to anyone considering this area.
>
> --Steve
>
> ---------------------------------------------------------------------
> reply to schear - at - lvcm - dot - com ---
>
> PGP mail preferred, see http://www.pgp.com and
> http://web.mit.edu/network/pgp.html
>
> RSA fingerprint: FE90 1A95 9DEA 8D61 812E CCA9 A44A FBA9
> RSA key: http://keys.pgp.com:11371/pks/lookup?op=index&search=0x55C78B0D
> ---------------------------------------------------------------------

-- 
Kriston J. Rehberg
http://kriston.net/
AOL: Kriston                                   endeavor to persevere

• Next message: Tom Weinstein: "Re: timing attacks."
• Previous message: Eric Murray: "Re: Random seeds"
• In reply to: Perry E. Metzger: "Re: Random seeds"
• Next in thread: jcaldwel@iquest.net: "Re: filesystem encryption"
• Reply: jcaldwel@iquest.net: "Re: filesystem encryption"