AEFS security improvements Claimed by none (No sponsor funds)

Task: AEFS security improvements

Description: AEFS is an open-source cryptographic filesystem that is available for OS/2. However, it has some weeknesses which the documentation lists under "3.2 Security Problems". In addition, 128 bit encryption is definitely not enough nowadays.The bounty suggest the following improvements:

Easy:
  • Implementation of a strong encryption algorithm. Usage of this algorithm should be an option to retain usability on slower machines.
  • Add an option to replace the encryption via a user-remembered key by encryption the GPG/PGP way: generate a (cryptographically) strong pseudo-random key to be encrypted by a user-entered pass phrase. That way, only the file containing the encrypted key is vulnerable to a key guessing attack.
Maybe GPG code could be used to implement the above two items.

Harder:
  • Prevent AEFS data to be written to SWAPPER.DAT.
  • Add a feature to store the encrypted files in a single container file with optional compression like the encryption-enabled version of Zipstream did.

License: GNU GPL V2

WebSite URL: http://people.cs.uu.nl/eelco/aefs/

For more information check the supporting thread within the online forum.

Current Bounty: $0

Sponsors: none

Submitter: Christian Hennecke

{mos_smf_discuss:no_discuss}

Open Bounties

Suggested Bounties

Closed Bounties

Search

Who's Online

We have 975 guests and 3 members online

  • martini
  • Floyd
  • rexfahrer

Poll

OS/2 Distro & Version

Which OS/2 based OS do you have installed and use frequently ? (VM or Real hardware)

62
ArcaOS 5.0.x
61
eComStation 2.x
40
OS/2 Warp 4.5x (Client and/or Server)
19
OS/2 Warp 4.0 (Client and/or Server)
9
eComStation 1.x
Add a new response!
» Go to poll »
3 Votes left

jVS by www.joomess.de.

Social Media

Follow us also at:

Facebook  Twitter  LinkedIn

 Google Plus-  github icon

 

Like Us


Artie v1 0