netdev - [0/3] POHMELFS high performance network filesystem. Strong crypto support.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Mon, 7 Jul 2008 22:15:55 +0400
From:	Evgeniy Polyakov <johnpol@....mipt.ru>
To:	linux-kernel@...r.kernel.org
Cc:	netdev@...r.kernel.org, linux-fsdevel@...r.kernel.org
Subject: [0/3] POHMELFS high performance network filesystem. Strong crypto support.

Subject should be "POHMELFS high performance network filesystem. Strong
crypto support."

This release brings ability to encrypt data channel in case of
distributed filesystem created on top of uncontrolled channels.

One can setup different crypto algorithms, which will be autoconfigured
at mount time (depending on options it will or will not fail, if server
does not support requested algorithms, if administrator requested not to
fail, system will disable appropriate algorithm usage).

IOzone performance testing showed performance drop in case of
cbc(aes)+sha1 crypto operations, but system still behaves faster than
plain in-kernel async NFS. Nice picture in attach (or via link at:
http://tservice.net.ru/~s0mbre/blog/devel/fs/2008_07_07.html)

Plain read/write performance link:
http://tservice.net.ru/~s0mbre/blog/devel/fs/2008_06_25.html

-- 
	Evgeniy Polyakov

Download attachment "pohmelfs_sncrypted_vs_plain_async_nfs.png" of type "image/png" (4883 bytes)