Encryption on Linux: Difference between revisions

Revision as of 09:26, 9 August 2006

Revision as of 17:27, 15 August 2006

Line 14:

* [http://loop-aes.sourceforge.net/aespipe/ aespipe], program to encrypt a file stream with the [[Advanced Encryption Standard|AES]] algorithm with key lengths 128, 192 and 256 bit

* [http://www.saout.de/misc/dm-crypt/ dm-crypt], included in the mainline kernel, but buggy (can cause major data corruption when used together with software RAID5)

** [http://luks.endorphin.org/ LUKS] (Linux Unified Key Setup) aims to improve dm-crypt key management.

** [http://cryptmount.sourceforge.net cryptmount] allows mounting dm-crypt volumes without superuser privileges.

* Cryptoloop, a [[Loop device|loop back]] encryption method, is included in the mainline kernel but is insecure and has been deprecated in favor of dm-crypt.

* [http://loop-aes.sourceforge.net/ loop-AES] supports kernel 2.0.x onward; no kernel patch required, but requires loading of a patch.kernel module; mature

* [http://cryptmount.sourceforge.net/ Crypt Mount]

* [http://ecryptfs.sourceforge.net/ eCryptFS], a stacked filesystem in the kernel '-mm' tree.