基于Linux的通用加密文件系统Waycryptic的设计与实现

近年来,保护个人敏感数据成为人们关注的热点问题.使用加密技术是一种比较成功的保护方法.本文提出一种通用的加密文件系统—Waycryptic,将加密技术集成到文件系统层,应用程序完全不用任何修改就可以获得透明、动态、高效和安全的加密功能,加密文件可以不受限制地存放于任何物理文件系统,同时允许加密文件方便地在多个用户间共享以及指定账号恢复加密文件.Iozone和Bonnie测试程序的结果显示Waycryptic的性能令人满意,适合于具有安全要求的个人或多用户系统.

Design and Implementation of Waycryptic, a Versatile Cryptographic File System for Linux

Recently it has been a focus to protect personal sensitive information. Using cryptographic technique is a promising way. This paper describes the design and implementation of Waycryptic, a versatile cryptographic file system for Linux. By integrating cryptographic technique into file system level, users obtain transparent, dynamic, efficient and secure encryption function without modifying their applications. Encrypted files could be saved on any physical file system which supports extended attributes (XATTR). Waycryptic also permits encrypted files to be shared among multi users and to be easily recovered by designating an account in advance. The results of Iozone and Bonnie benchmarks show that Waycryptic is comparatively efficient and is suitable for personal or multi-user systems which require enhanced security.