AEFS security improvements Claimed by none (No sponsor funds)
Task: AEFS security improvements
Description: AEFS is an open-source cryptographic filesystem that is available for OS/2. However, it has some weeknesses which the documentation lists under "3.2 Security Problems". In addition, 128 bit encryption is definitely not enough nowadays.The bounty suggest the following improvements:
Easy:
Harder:
License: GNU GPL V2
WebSite URL: http://people.cs.uu.nl/eelco/aefs/
For more information check the supporting thread within the online forum.
{mos_smf_discuss:no_discuss}
Description: AEFS is an open-source cryptographic filesystem that is available for OS/2. However, it has some weeknesses which the documentation lists under "3.2 Security Problems". In addition, 128 bit encryption is definitely not enough nowadays.The bounty suggest the following improvements:
Easy:
- Implementation of a strong encryption algorithm. Usage of this algorithm should be an option to retain usability on slower machines.
- Add an option to replace the encryption via a user-remembered key by encryption the GPG/PGP way: generate a (cryptographically) strong pseudo-random key to be encrypted by a user-entered pass phrase. That way, only the file containing the encrypted key is vulnerable to a key guessing attack.
Harder:
- Prevent AEFS data to be written to SWAPPER.DAT.
- Add a feature to store the encrypted files in a single container file with optional compression like the encryption-enabled version of Zipstream did.
License: GNU GPL V2
WebSite URL: http://people.cs.uu.nl/eelco/aefs/
For more information check the supporting thread within the online forum.
Current Bounty: $0
Sponsors: none
Submitter: Christian Hennecke{mos_smf_discuss:no_discuss}
Suggested Bounties
Closed Bounties
- SWTSwing claimed by none
- OpenWengo port claimed by none
- USB extended keyboard driver claimed by none
- OS/2 device drivers for Minolta filmscanners claimed by none
- PCMCIA USB 2.0 cards drivers claimed by none
- Maul XHTML import handler claimed by none
- TrueCrypt port claimed by none
- Firewire Driver Development claimed by none
- Porting AbiWord claimed by none
- Extend multimedia support for OS2 & eCS claimed by none
- Porting free gnat ADA 2005 compiler on OS/2 claimed by none
- Port of FreeMat claimed by none
- SAGE OS/2-eCS Port claimed by none
- General Win32 Plugin for Mozilla/Firefox claimed by none
- Skype for OS/2 claimed by none
- OS2 & eCS kernel claimed by none
- GemPlus PC400 driver support claimed by none
- Icon routines in OS/2 laimed by none
- Common File Open/Save Dialog claimed by none
- Native OS/2 Port of Lotus Notes 8.5 claimed by none
- Backup Tool Claimed by none (No sponsor funds)
- Utility to convert HPFS partitions to JFS Claimed by none (No sponsor funds)
- DVDStyler Port Claimed by none (No sponsor funds)
- Special Functionality for Evoluent Mouse under OS2-eCS Claimed by none (No sponsor funds)
- Tuniac port - Tuniac/2 Claimed by none (No sponsor funds)
- Pidgin (Instant Messaging Client) Port Claimed by none (No sponsor funds)
- Alice 3D programming environment Port Claimed by none (No sponsor funds)
- Emacs Port Claimed by none (No sponsor funds)
- AEFS security improvements Claimed by none (No sponsor funds)
- VTun (Virtual Tunnel Driver) Port Claimed by none (No sponsor funds)
- VPNC Port (Client for Cisco VPN Concentrator) Claimed by none (No sponsor funds)
- Filezilla client Port Claimed by none (No sponsor funds)
- wxWidgets Improved GUI Claimed by none (No sponsor funds)
- Moonlight Port Claimed by none (No sponsor funds)
- The Mono project Port Claimed by none (No sponsor funds)
- cdrtfe Port Claimed by none (No sponsor funds)
- InfraRecorder Port Claimed by none (No sponsor funds)
- Xara Xtreme Port Claimed by none (No sponsor funds)
- HyperEngine-AV Port Claimed by none (No sponsor funds)
- MediaCoder port Claimed by none (No sponsor funds)