OS - Software

[Nobody's Hero]

Can someone tell me what options are available for excryption on UNIX devices for Solaris and HP either natively in the OS or 3rd party?

[Nobody's Hero]

Any pros or cons to using encryption? Especially for backing up data or anything like that?

[Arunvijai_4]

Hi,

Why dont you try with OpenSSL toolkit? http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=OPENSSL11I

-Arun

[Nobody's Hero]

Is there a similar product of OpenSSL for solaris? I need a method for HP and solaris that are the same.

[Nobody's Hero]

How about a product that would protect an entire filesystem? Like hard disk encryption that is being used for laptops these days. So when you boot up and log on, you need to enter a pin and password to access any data at all. I know there is a product in the windows world called: win magic or secure doc. Is there anything like that in the UNIX world, device encryption.

[Arunvijai_4]

Hi,

OpenSSL is available in Solaris as well. Check http://www.google.com/custom?q=openssl&sa=Search&domains=www.sunfreeware.com&sitesearch=www.sunfreeware.com

and, check this wikipedia for more information:http://en.wikipedia.org/wiki/Disk_encryption_software

-Arun

[Nobody's Hero]

Looks like there are many products to do disk/filesystem encryption for Windows and Linux.

Anyone know of a product that will do the same for Solaris and HP?

[Jaime Bolanos Rojas.]

OK, this link will give a list of encryption software, most of them 3rd party product from different prices.

Please check the list as some of them just work on windows, other in hp-ux and solaris, etc.

http://www.seifried.org/security/cryptography/crypto-book/appendix-a.html

Regards,

Jaime.

[spex]

Hi,

Have a look at this thread:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1039123

PCS

[dirk dierickx]

this is mainly a feature from the OS itself, so if the manufactor has it available in its OS, it will be different across platforms.

on solaris i found this:

Work has already been done in this area, but at the moment it's not part of Solaris, yet.

Using loopback mounts (lofi) it is possible to mount a filesystem (or even sub-dirs) as being encrypted. "lofi" has been extended (called xlofi) to include the encryption layer. This, combined with PAM, enables easy access to encrypted files.

It is also possible to encrypt your swap device using this.

The plan is to productise the current implementation and make it public on Open Solaris.org. Subsequent to that the necessary work will be done to bring it in to the core of Solaris.

so nothing is available yet on solaris

for hpux i found the following:

HP-UX 11i Encrypted Volume and File System service

In the second half of 2006, HP plans to ship Encrypted Volume and File System (EVFS) service for HP-UX 11i. This development is in direct response to customers' request for encryption of data "at rest", in many cases driven by government legislation and security audit compliance.

http://h20338.www2.hp.com/hpux11i/cache/324629-0-0-0-121.html

just to be complete, linux had this for a while already, called encfs, found here: http://arg0.net/wiki/encfs