Re: encrypted swap - a schema proposal

[Ahmed Masud]

On 23 May 2003, kernel wrote:

> Hello Ahmed
>
> question for you.  What about what Microsoft is purportedly doing for
> 2003 Server?  Wherein they use the public key model.  I.E., the
> pagefile.sys entire file is encrypted with public key and that exchange
> happens with a user or users who are then allowed to use it as needed.

Well this is currently achievable without doing any further work in its
most trivial form by using crypto loop devices.  The idea is to hide the
entire functionality from the users. Nothing that the user is doing should
change.

The model i proposed is designed under two main constraints:

1. User should be oblivious to any changes to the system.
2. We don't want to redesign the linux mm subsystem we just want to become
friends with it. ;)

Cheers,

Ahmed.