Description: AEFS is an open-source cryptographic filesystem that is available for OS/2. However, it has some weeknesses which the documentation lists under "3.2 Security Problems". In addition, 128 bit encryption is definitely not enough nowadays.The bounty suggest the following improvements:
Easy:
- Implementation of a strong encryption algorithm. Usage of this algorithm should be an option to retain usability on slower machines.
- Add an option to replace the encryption via a user-remembered key by encryption the GPG/PGP way: generate a (cryptographically) strong pseudo-random key to be encrypted by a user-entered pass phrase. That way, only the file containing the encrypted key is vulnerable to a key guessing attack.
Harder:
- Prevent AEFS data to be written to SWAPPER.DAT.
- Add a feature to store the encrypted files in a single container file with optional compression like the encryption-enabled version of Zipstream did.
License: GNU GPL V2
WebSite URL: http://people.cs.uu.nl/eelco/aefs/
For more information check the supporting thread within the online forum.
Current Bounty: $0
Sponsors: none
Submitter: Christian Hennecke{mos_smf_discuss:no_discuss}