CryFS
Original author(s)Sebastian Messmer
Initial releaseDecember 31, 2016; 7 years ago (2016-12-31)
Stable release
1.0.1 / November 23, 2024; 7 days ago (2024-11-23)
Written inC++
Operating systemLinux, OSX, Microsoft Windows
Platformx86-64
Typefilesystem, encryption
LicenseLGPL v3.0
Websitewww.cryfs.org

CryFS is a package of disk encryption software for Linux. Its development has been focused particularly on data encryption in cloud storage environments. The security of CryFS has been proven in a master's thesis[1] and in a scientific paper using a game-based security approach.

Details

edit

The goal of CryFS is not only to keep file contents, but also file sizes, metadata and directory structure confidential.

To hide file sizes, CryFS splits the content of a file into same-size blocks and encrypts these blocks individually. A tree structure is used to remember how the blocks belong together to form a file. This tree structure has very little overhead and itself is also stored using encrypted same-size blocks. To hide file metadata and directory structure, they are also represented using encrypted same-size blocks.

Each encrypted block is stored as a file in the base directory, using a random ID as filename. The base directory can then be set up to be synchronized with a cloud provider like Dropbox. An attacker with access to the base directory can only see a set of same-size ciphertext blocks and can't see contents, file sizes, metadata or directory structure of your data.

The blocks are encrypted using a block cipher chosen by the user. A random encryption key is generated when the filesystem is created. This key is stored in a configuration file, which is then encrypted using the password chosen by the user. Since it is encrypted, it can be stored together with the ciphertext blocks in the cloud, which is the default.[2]

See also

edit

References

edit
  1. ^ Sebastian Messmer (2015-04-16). "CryFS: Design and Implementation of a Provably Secure Encrypted Cloud Filesystem" (PDF). Retrieved 2024-11-30.
  2. ^ Sebastian Messmer. "CryFS: How it works". Retrieved 2024-11-30.
edit

Category:Cryptographic software Category:Disk encryption