genodelabs/genode — Issue #55: Crypto block service
Author: nfeske
Created: 2012-01-03 13:38:35+00:00
State: open
Labels: feature

We need a facility to transparently encrypt/decrypt block sessions similar to the crypto-loop in Linux. This service should come in the form of a separate component that opens a block session and, in turn, provides a block session. We need to figure out how this components obtains the crypto key and a way to ask the user for a pass phrase.

I propose to store the key protected by the user's pass phrase as part of config file. For the first version, querying the key should be done using the nitpicker GUI server. In the future, we may introduce a separate pass-phrase-request interface such that the pass-phrase input can be decoupled from the GUI server (i.e., providing block encryption for non-GUI users).