AEFS security improvements Claimed by none (No sponsor funds)

Task: AEFS security improvements

Description: AEFS is an open-source cryptographic filesystem that is available for OS/2. However, it has some weeknesses which the documentation lists under "3.2 Security Problems". In addition, 128 bit encryption is definitely not enough nowadays.The bounty suggest the following improvements:

Easy:
  • Implementation of a strong encryption algorithm. Usage of this algorithm should be an option to retain usability on slower machines.
  • Add an option to replace the encryption via a user-remembered key by encryption the GPG/PGP way: generate a (cryptographically) strong pseudo-random key to be encrypted by a user-entered pass phrase. That way, only the file containing the encrypted key is vulnerable to a key guessing attack.
Maybe GPG code could be used to implement the above two items.

Harder:
  • Prevent AEFS data to be written to SWAPPER.DAT.
  • Add a feature to store the encrypted files in a single container file with optional compression like the encryption-enabled version of Zipstream did.

License: GNU GPL V2

WebSite URL: http://people.cs.uu.nl/eelco/aefs/

For more information check the supporting thread within the online forum.

Current Bounty: $0

Sponsors: none

Submitter: Christian Hennecke

{mos_smf_discuss:no_discuss}

Open Bounties

Suggested Bounties

Closed Bounties

2018 Video Stream

$ 1200
donation thermometer
donation thermometer
$ 950
donation thermometer
79%
Updated
2018/Aug/15
Artie Calgary

Search

Who's Online

We have 135 guests and no members online

Poll

ArcaOS Existing Drivers

Which ArcaOS driver requires more work and updates? (Choose 3)

1
49
Video (SNAP or Panorama)
2
28
ACPI
3
22
Network
4
21
USB 2.x
5
11
Mouse
Add a new response!
» Go to poll »
3 Votes left

jVS by www.joomess.de.

Social Media

Follow us also at:

Facebook  Twitter  LinkedIn

 Google Plus-  github icon

 

Like Us


Artie v1 0