AEFS security improvements Claimed by none (No sponsor funds)

Task: AEFS security improvements

Description: AEFS is an open-source cryptographic filesystem that is available for OS/2. However, it has some weeknesses which the documentation lists under "3.2 Security Problems". In addition, 128 bit encryption is definitely not enough nowadays.The bounty suggest the following improvements:

Easy:
  • Implementation of a strong encryption algorithm. Usage of this algorithm should be an option to retain usability on slower machines.
  • Add an option to replace the encryption via a user-remembered key by encryption the GPG/PGP way: generate a (cryptographically) strong pseudo-random key to be encrypted by a user-entered pass phrase. That way, only the file containing the encrypted key is vulnerable to a key guessing attack.
Maybe GPG code could be used to implement the above two items.

Harder:
  • Prevent AEFS data to be written to SWAPPER.DAT.
  • Add a feature to store the encrypted files in a single container file with optional compression like the encryption-enabled version of Zipstream did.

License: GNU GPL V2

WebSite URL: http://people.cs.uu.nl/eelco/aefs/

For more information check the supporting thread within the online forum.

Current Bounty: $0

Sponsors: none

Submitter: Christian Hennecke

{mos_smf_discuss:no_discuss}

Open Bounties

Suggested Bounties

Closed Bounties

Search

Who's Online

We have 98 guests and no members online

Poll

ArcaOS Existing Drivers

Which ArcaOS driver requires more work and updates? (Choose 3)

1
78
Video (SNAP or Panorama)
2
44
ACPI
3
38
Network
4
32
USB 2.x
5
13
Mouse
Add a new response!
» Go to poll »
3 Votes left

jVS by www.joomess.de.

Social Media

Follow us also at:

Facebook  Twitter  LinkedIn

 Google Plus-  github icon

 

Like Us


Artie v1 0