It supports secure storage at the system level through a standard Unix file system interface to encrypted files.
Users associate a cryptographic key with the directories they wish to protect.
CFS employs a novel combination of DES stream and codebook cipher modes to provide high security with good performance on a modern workstation. System management functions, such as file backup, work in a normal manner and without knowledge of the key. It consists of about 5000 lines of code and supporting documentation. ACM Conference on Computer and Communications Security, Fairfax, VA, November 1993. Conference, Boston, MA, June 1994.