Project Home
Project Home
Trackers
Trackers
Documents
Documents
Wiki
Wiki
Discussion Forums
Discussions
Project Information
Project Info
Forum Topic - File system encryption using fsencrypt: (5 Items)
   
File system encryption using fsencrypt  
It seems to me that this is no block level encryption solution (like dm-crypt in Linux). I found fsencrypt in the QNX 
document. However, in the document it mentioned "The fsencrypt utility manages the encryption of a Power-Safe (fs-qnx6.
so) filesystem. In order to use fsencrypt, you must have specified crypto=enable for fs-qnx6.so."

I have a flash device that is currently using FF3S file-system. Does fsencrypt works in this file system? 
Re: File system encryption using fsencrypt  
My understanding isthat fsencrypt works only in conjunction with the fs-qnx6.so on a block device.
FFSv3, if there is support for encryption, must have its own solution, but I am not aware of any.

What you could do is run devb-loopback on top af a large-enough file inside the FFSv3 partition, and launch encryption 
on that. Of course there is a performance penalty, but maybe it is acceptable.

Regards,
Albrecht
Re: File system encryption using fsencrypt  
> My understanding isthat fsencrypt works only in conjunction with the fs-qnx6.
> so on a block device.
> FFSv3, if there is support for encryption, must have its own solution, but I 
> am not aware of any.
> 
> What you could do is run devb-loopback on top af a large-enough file inside 
> the FFSv3 partition, and launch encryption on that. Of course there is a 
> performance penalty, but maybe it is acceptable.
> 
> Regards,
> Albrecht

Hi Albrecht, Thank you for your response. Sorry I'm new to QNX. It might work for me. Could you explain a little bit 
more? Right now I start like this:

# Starting QSPI flash driver
on -R 0xD devf-qspi-xzynq-zcu102
flashctl -p /dev/fs0p0 -o 0xee00000 -l 0x400000 -e -f -v -U
flashctl -p /dev/fs0p1 -U
flashctl -p /dev/fs0p1 -v -m -n /mnt/flash-partition

How can I create a devb-loopback and encrypt it? Thank you!
Re: File system encryption using fsencrypt  
I think it works! I encrypted it like this, but I think it was a long time ago
Re: File system encryption using fsencrypt