AEFS security improvements Claimed by none (No sponsor funds)

Task: AEFS security improvements

Description: AEFS is an open-source cryptographic filesystem that is available for OS/2. However, it has some weeknesses which the documentation lists under "3.2 Security Problems". In addition, 128 bit encryption is definitely not enough nowadays.The bounty suggest the following improvements:

  • Implementation of a strong encryption algorithm. Usage of this algorithm should be an option to retain usability on slower machines.
  • Add an option to replace the encryption via a user-remembered key by encryption the GPG/PGP way: generate a (cryptographically) strong pseudo-random key to be encrypted by a user-entered pass phrase. That way, only the file containing the encrypted key is vulnerable to a key guessing attack.
Maybe GPG code could be used to implement the above two items.

  • Prevent AEFS data to be written to SWAPPER.DAT.
  • Add a feature to store the encrypted files in a single container file with optional compression like the encryption-enabled version of Zipstream did.

License: GNU GPL V2

WebSite URL:

For more information check the supporting thread within the online forum.

Current Bounty: $0

Sponsors: none

Submitter: Christian Hennecke


Open Bounties

Suggested Bounties

Closed Bounties


Who's Online

We have 78 guests and no members online


OS/2 Distro & Version

Which OS/2 based OS do you have installed and use frequently ? (VM or Real hardware)

ArcaOS 5.0.x
eComStation 2.x
OS/2 Warp 4.5x (Client and/or Server)
OS/2 Warp 4.0 (Client and/or Server)
eComStation 1.x
Add a new response!
» Go to poll »
3 Votes left

jVS by

Social Media

Follow us also at:

Facebook  Twitter  LinkedIn

 Google Plus-  github icon


Like Us

Artie v1 0