Filesystem-level encryption: Difference between revisions

Revision as of 12:49, 2 May 2008

Revision as of 21:56, 2 May 2008

Line 8:

==General-purpose file systems with encryption==

Unlike cryptographic file systems or full disk encryption, general-purpose file systems that include filesystem-level encryption do not typically encrypt file system [[metadata]], such as the directory structure, file names, sizes or modification timestamps. This can be problematic if the metadata itself needs to be kept confidential. ThisIn alsoother meanswords, thatif thefiles contentare tostored bewith encrypted can always be discretely identified (its filename and metadata identifies the individualidentifying file tonames, anyone includingwho unauthorizedhas users). This makes it impossibleaccess to make the contentphysical undetectabledisk orcan itsknow existence unprovable inthe waysdocuments that are possiblestored usingon approachesthe suchdisk, asalthough virtualnot filesystemsthe likecontents aof [[PGPthe disk]]documents.

==Cryptographic file systems==