File System Encryption

I'm aware of the three main disk encryption programs SFS, SECDRV, and
SECDEV, but I need to find a solution that works with Windows 95 32bit
or Windows NT 4.0.

I'm currently using SFS 1.17 and Secure Drive under Win-95, but am
unable to continue to work in dos compatability mode due to severe
performance hits.  I am open to commercial products that have passed
peer review, but know of none.

If anyone could suggest a solution (outside of switching OS's), I
would be *most* gratefull.

Please respond to the list, as I am a subscriber under another
account.

The Drifter

> 
> I'm aware of the three main disk encryption programs SFS, SECDRV, and
> SECDEV, but I need to find a solution that works with Windows 95 32bit
> or Windows NT 4.0.
> 
> I'm currently using SFS 1.17 and Secure Drive under Win-95, but am
> unable to continue to work in dos compatability mode due to severe
> performance hits.  I am open to commercial products that have passed
> peer review, but know of none.
> 
> If anyone could suggest a solution (outside of switching OS's), I
> would be *most* gratefull.
> 
> Please respond to the list, as I am a subscriber under another
> account.

If you have another 386 or 486 lying around, you could install Linux and
Ian's encrypted loopback code on a remote box, then NFS or Samba the
filesystem over.  For protection, you could modify the vlock command to
lock the console (and not unlock it), and disable inetd.  Then, unless
someone has the permissions to access the files through the network, the
files are inaccessable ;-).

> 
> The Drifter
>

On Tue, 27 Aug 1996, Douglas R. Floyd wrote:

> If you have another 386 or 486 lying around, you could install Linux and
> Ian's encrypted loopback code on a remote box, then NFS or Samba the
> filesystem over.  For protection, you could modify the vlock command to
> lock the console (and not unlock it), and disable inetd.  Then, unless
> someone has the permissions to access the files through the network, the
> files are inaccessable ;-).

I may have to consider this approach. I'll have to look into Ian's system.
Does it pass muster with the crypto gods? (that's meant as a compliment
guys :)

Drifter

> 
> 
> 
> On Tue, 27 Aug 1996, Douglas R. Floyd wrote:
> 
> > If you have another 386 or 486 lying around, you could install Linux and
> > Ian's encrypted loopback code on a remote box, then NFS or Samba the
> > filesystem over.  For protection, you could modify the vlock command to
> > lock the console (and not unlock it), and disable inetd.  Then, unless
> > someone has the permissions to access the files through the network, the
> > files are inaccessable ;-).
> 
> I may have to consider this approach. I'll have to look into Ian's system.
> Does it pass muster with the crypto gods? (that's meant as a compliment
> guys :)

It uses IDEA in a decently secure manner, as well as TDES.  You can also
mount .au files as filesystems, and the data will be hidden in the sound
file.

(Last place I remember Ian's loop.c and des patches for Linux was on
ftp.csua.berkeley.edu, /pub/cypherpunks/<somewhere>)

> 
> Drifter
>

On Wed, 28 Aug 1996, Douglas R. Floyd wrote:

> > I may have to consider this approach. I'll have to look into Ian's system.
> > Does it pass muster with the crypto gods? (that's meant as a compliment
> > guys :)
> 
> It uses IDEA in a decently secure manner, as well as TDES.  You can also
> mount .au files as filesystems, and the data will be hidden in the sound
> file.
> 
> (Last place I remember Ian's loop.c and des patches for Linux was on
> ftp.csua.berkeley.edu, /pub/cypherpunks/<somewhere>)
> 

ftp.csua.berkeley.edu:/pub/cypherpunks/filesystems/linux. 

I haven't looked through the code very hard yet, but I do wonder how the
passphrase and such is stored. If I run losetup and setup
/root/stego_file.au as a filesystem on /dev/loop0, does that get stored
anywhere that isn't secure from non-root processes, or that is kept after
the filesystem is unmounted? I figure the passphrase definately is removed
as soon as the filesystem is unmounted, and that this is stored in
protected kernel memory.

Jason Burrell wrote:
> 
> On Wed, 28 Aug 1996, Douglas R. Floyd wrote:
> 
> > > I may have to consider this approach. I'll have to look into Ian's system.
> > > Does it pass muster with the crypto gods? (that's meant as a compliment
> > > guys :)
> > 
> > It uses IDEA in a decently secure manner, as well as TDES.  You can also
> > mount .au files as filesystems, and the data will be hidden in the sound
> > file.
> > 
> > (Last place I remember Ian's loop.c and des patches for Linux was on
> > ftp.csua.berkeley.edu, /pub/cypherpunks/<somewhere>)
> > 
> 
> ftp.csua.berkeley.edu:/pub/cypherpunks/filesystems/linux. 

Anyone had any luck with ftp.csua.berkeley.edu? My ftp client says
that "client not responding to commands, hanging up".

What is wrong?

igor

> I haven't looked through the code very hard yet, but I do wonder how the
> passphrase and such is stored. If I run losetup and setup
> /root/stego_file.au as a filesystem on /dev/loop0, does that get stored
> anywhere that isn't secure from non-root processes, or that is kept after
> the filesystem is unmounted? I figure the passphrase definately is removed
> as soon as the filesystem is unmounted, and that this is stored in
> protected kernel memory. 
> 



	- Igor.

> 
> Jason Burrell wrote:
> > 
> > On Wed, 28 Aug 1996, Douglas R. Floyd wrote:
> > 
> > > > I may have to consider this approach. I'll have to look into Ian's system.
> > > > Does it pass muster with the crypto gods? (that's meant as a compliment
> > > > guys :)
> > > 
> > > It uses IDEA in a decently secure manner, as well as TDES.  You can also
> > > mount .au files as filesystems, and the data will be hidden in the sound
> > > file.
> > > 
> > > (Last place I remember Ian's loop.c and des patches for Linux was on
> > > ftp.csua.berkeley.edu, /pub/cypherpunks/<somewhere>)
> > > 
> > 
> > ftp.csua.berkeley.edu:/pub/cypherpunks/filesystems/linux. 
> 
> Anyone had any luck with ftp.csua.berkeley.edu? My ftp client says
> that "client not responding to commands, hanging up".
> 
> What is wrong?
> 
> igor

Try a mirror.  ftp.funet.fi,
/pub/crypt/mirrors/soda/cypherpunks/filesystems/linux.

-----BEGIN PGP SIGNED MESSAGE-----

On Wed, 28 Aug 1996, Douglas R. Floyd wrote:

> Try a mirror.  ftp.funet.fi,
> /pub/crypt/mirrors/soda/cypherpunks/filesystems/linux.

Unfortunately, funet is down also.  csclub.uwaterloo.ca/pub/linux-stego seems
to work right now.

- -- Mark

PGP encrypted mail prefered.
Key fingerprint = d61734f2800486ae6f79bfeb70f95348
http://www.voicenet.com/~markm/

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3
Charset: noconv

iQEVAwUBMiTKpizIPc7jvyFpAQHIfAgAzHhGF4Krei/QeaOL85TyqfMQVvCcCLsM
qs+3y2NqTSzoNAq4loV3B4foWSL6UsVjzNYVCVKnDZHC48FAA1uS1yNuW/k/Jx8c
2/2BEd4kkCDOqIT5dqg+EhQWGoJgKw265OP9YrmAOux+DWjznPXeiUsZYRtPKGFG
CKrt7Om9Knz3Gb0Yli8gYBZahtXfN6/lmfyViCmYvbc5INOupVfL+X4koxQRoVAe
f5uwiknaVaDYf5kc/Hr/xO1/UZvVXofJTInkdqP/D4ThCaCoH6m5c4TvMJBhU/3M
pTXYL6iU/lpa1bVfF1jmgilzsufJo0GmDtjdx2toKETBycaSOyQmDg==
=LecO
-----END PGP SIGNATURE-----