Re: [Acl-devel] Need Assistance for xattr

[Andreas Gruenbacher]

Hello,

On Fri, 2011-09-30 at 13:31 +0530, Parag Amritkar wrote:
> We r working on inherent encryption decryption in kernel,nw we r
> stucked upon where to store key of encryption.We thought to store it
> in inode or xattr but most of d linux forums criticized such approach.
> What would u suggest? Please reply as early as possible. This is our
> Project Abstract->
> 
> Abstract:
> 
> In today's world securing file data is very important. The proposed
> Secure File System (SecFS), we will be providing file data security
> using cryptographic techniques in a transparent and convenient way.
> The proposed SecFS pushes encryption services into the Linux kernel
> space, mounting it between the virtual file system layer and
> underlying file system. After SecFS is integrated with the Linux
> operating system (OS), it enables OS to provide file data security as
> its inherent functionality. SecFS requires that the user creates a
> directory and name it with the prefix 'ecrypt' to store the encrypted
> file data, such as ecryptdir. Any directory on the system with the
> prefix 'ecrypt' will basically tells the system that the newly created
> directory will contain encrypted data. All files destined to be saved
> on this directory will be transparently encrypted on the fly without
> any user intervention. SecFS will be fully compatible with all
> underlying storage file systems.

please have a look at ecryptfs, https://launchpad.net/ecryptfs, and
think about what you want to do differently, and why.

Andreas