Well, generaly I am interested in application security. And SSH did
cross my mind :-)

But as I read your comments, I guess I should stay away of network for
this iteration.

My proposal modification would therefore be to create a encypted block
device api.
It would sit between hard-drive and filesystem, which, as I heard from
Martin Sucha. is quite a stable place.

And this would give me oportunity to:

1) port all the cryptographic primitives (hash functions, block
ciphers, stream ciphers, asymetric crypto, e.t.c)
2) Maybe create somewhat usable system-wide crypto api?
3) Implement something usefull with it, ie. disc encryption.
Preferably compatible with linux dm-crypt.

Then, with 1 and 2 in place and tested, it would be easier to create
native implementation of other security features in helenos.

What do you think?

Adam

_______________________________________________
HelenOS-devel mailing list
[email protected]
http://lists.modry.cz/cgi-bin/listinfo/helenos-devel

Reply via email to