Hi Hyoklee

no :-) it is unfortunately proprietary code for the moment, maybe at some
point we share it as soon as we have a project with THG (cc Quincey).
However, I can tell you that compared to using filters it is by far the
most efficient method to encrypt the file.

Cheers

Dimitris


2014-03-21 14:05 GMT+01:00 H. Joe Lee <[email protected]>:

> Hi Dimitris,
>
>   Your work sounds very interesting. Is it possible to share your code
> as an open source project to the community? Or is it already available
> somewhere for download and test?
> --
> Are your big (Earth) data in HDF(-EOS)?
>
>
> On Fri, Mar 21, 2014 at 5:28 AM, Dimitris Servis <[email protected]>
> wrote:
> > Hi Jim
> >
> > I have written a non-terminal VFL driver that segregates the metadata and
> > encrypts it.
> >
> > Cheers
> >
> > Dimitris
> >
> >
> > 2014-03-21 11:23 GMT+01:00 huebbe
> > <[email protected]>:
> >
> >> While it is possible to perform some encryption in a filter, the filter
> >> mechanism is not designed for encryption. The problem is the key:
> >> Filters don't get arbitrary data from the calling application to do the
> >> decryption, they get only data that is stored in the file. Otherwise,
> >> the HDF5 library would not be able to do the decoding in a completely
> >> transparent way. And if you put the key into the file (as filter
> >> options, or similar), the NSA will be happy.
> >>
> >> To use the filter mechanism for encryption, you would need to get the
> >> key via a side-channel. This is possible, but it will be hard to do this
> >> in a usable and portable fashion. For instance, you cannot just pop up a
> >> dialog asking for a key, because many programs using HDF5 don't even
> >> have a text terminal connected to them while they run.
> >>
> >> Also note that filtering does not touch the metadata in the file. I. e.
> >> the NSA will be able to see the entire description of what is encoded in
> >> the file, they will just not have the actual data.
> >>
> >> If you want security, just use gpg to encrypt the entire file.
> >>
> >> Cheers,
> >> Nathanael Hübbe
> >>
> >>
> >>
> >> On 03/21/2014 12:44 AM, Rowe, Jim wrote:
> >> > Hello - has anyone used a symmetric encryption filter with HDF5?  I
> >> > would like to introduce encryption (AES, DES, 3DES) in the pipeline
> >> > after zlib compression to encrypt some datasets.
> >> >
> >> >
> >> >
> >> > Any examples, starting points, or suggestions would help.
> >> >
> >> >
> >> >
> >> >
> >> >
> >> > Thanks!
> >> >
> >> > --Jim
> >> >
> >> >
> >> >
> >> >
> >> >
> >> > _______________________________________________
> >> > Hdf-forum is for HDF software users discussion.
> >> > [email protected]
> >> >
> >> >
> http://mail.lists.hdfgroup.org/mailman/listinfo/hdf-forum_lists.hdfgroup.org
> >> >
> >>
> >>
> >> --
> >> Please be aware that the enemies of your civil rights and your freedom
> >> are on CC of all unencrypted communication. Protect yourself.
> >>
> >>
> >> _______________________________________________
> >> Hdf-forum is for HDF software users discussion.
> >> [email protected]
> >>
> >>
> http://mail.lists.hdfgroup.org/mailman/listinfo/hdf-forum_lists.hdfgroup.org
> >>
> >
> >
> > _______________________________________________
> > Hdf-forum is for HDF software users discussion.
> > [email protected]
> >
> http://mail.lists.hdfgroup.org/mailman/listinfo/hdf-forum_lists.hdfgroup.org
> >
>
> _______________________________________________
> Hdf-forum is for HDF software users discussion.
> [email protected]
>
> http://mail.lists.hdfgroup.org/mailman/listinfo/hdf-forum_lists.hdfgroup.org
>
_______________________________________________
Hdf-forum is for HDF software users discussion.
[email protected]
http://mail.lists.hdfgroup.org/mailman/listinfo/hdf-forum_lists.hdfgroup.org

Reply via email to