I know several of you out there are sitting ready to jump in and
protect your p0r^H^H^Hware^H^H^H^Hsource code with this as soon as
you see it, but please bear in mind that this is rather crude
implementation which mainly serves as "proof-of-concept" and that
the final article is likely to be entirely different from this.

But apart from that:

        mdconfig -a -t malloc -s 4m -u 98
        echo "<<FreeBSD-GEOM-AES>>" | dd conv=sync of=/dev/md98
        newfs /dev/md98.aes
        mount_ffs /dev/md98.aes /mnt

Have fun...


In message <[EMAIL PROTECTED]>, Poul-Henning Kamp 
>phk         2002/05/26 11:14:38 PDT
>  Modified files:
>    sys/conf             files 
>  Added files:
>    sys/geom             geom_aes.c 
>  Log:
>  Add a proof-of-concept encryption class.
>  "The only hard problem in cryptography is key-management."
>  All sectors are encrypted with AES in CBC mode using a constant key,
>  currently compiled in and all zero.
>  To activate this module, write the magic header on the partition:
>          echo "<<FreeBSD-GEOM-AES>>" | dd conv=sync of=/dev/md98
>  The encrypted device will be one sector shorter and have ".aes"
>  appended to its name.
>  Sponsored by: DARPA & NAI Labs.
>  Revision  Changes    Path
>  1.636     +1 -0      src/sys/conf/files
>  1.1       +274 -0    src/sys/geom/geom_aes.c (new)

Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
[EMAIL PROTECTED]         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message

Reply via email to