Subject: Re: Encrypted compressed vnds
To: None <tech-kern@netbsd.org>
From: Joerg Sonnenberger <joerg@britannica.bec.de>
List: tech-kern
Date: 08/07/2006 14:54:16
On Mon, Aug 07, 2006 at 10:29:49AM +0100, Stephen Borrill wrote:
> You may remember a discussion about encryption of compressed vnds that I 
> started: http://mail-index.netbsd.org/tech-kern/2006/06/23/0011.html
> No simple effective solution was proposed (compressing a cgd-on-vnd isn't 
> going to give good compression), so I've decided to go with my original 
> plan and implement DES encryption in the compression part of the vnd 
> driver.

If you want something simple, at least use a secure cipher. AES and
Blowfish are in the kernel already, so use them. RC4 is as well, but
considered weak now. DES is just not worth the effort.

Joerg