LWN.net Logo

eCryptfs: Support multiple keys per inode

From:  Michael Halcrow <mhalcrow@us.ibm.com>
To:  akpm@linux-foundation.org
Subject:  [PATCH 0/8] eCryptfs: Support multiple keys per inode
Date:  Thu, 19 Jul 2007 16:24:53 -0500
Message-ID:  <20070719212453.GA13821@halcrow.austin.ibm.com>
Cc:  linux-kernel@vger.kernel.org, tchicks@us.ibm.com, trevor.highland@gmail.com, pregan@ic.sunysb.edu, toml@us.ibm.com, sergeh@us.ibm.com, mhalcrow@us.ibm.com, mike@halcrow.us
Archive-link:  Article, Thread

This series of patches to eCryptfs introduces support for associating
multiple keys with individual files. When mounting, eCryptfs will
register one key for each key signature/identifier specified by an
ecryptfs_sig= mount option. These keys will all be used to encrypt the
FEK for each eCryptfs inode. This patch set also adds support for
searching the user's keyring for keys when opening existing files;
this allows the user to add keys to his keyring at any time, and
eCryptfs will use those keys to open files protected by those keys.

Copyright © 2007, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds