Encryption Driver

www.e4m.com is a good choice

Satish wrote:

Hi all,

Can i get any File Encryption/Decryption Sample from anywhere ?

Thanks in Advance,
Satish K.S

>
> How to Exclude the system files like ntoskrnl.exe, hal.dll or any other
.exe
> or .dll which loads before my driver ? Any idea ?
>
> Regards,
> Satish K.S
>
> > One of the simpliest methods is to apply a summing algo on the memory
> range
> > which you want to protect and periodicaly check it. This wont work for
> > hardware breakpoints. But if you write a encryption driver , focus
first
> on
> > implementing it , and leave those details to the end of development
cycle.
> > Anti -debugging is not so immportant for
> > encryption purposes , because if a user can decrypt a file by
“debugging”
> > your driver , the design you choosed is plain wrong.
> >
>
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@aalayance.com
> To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com


You are currently subscribed to ntfsd as: xxxxx@ptt.yu
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com


Kind regards, Dejan M. CEO Alfa Co. www.alfaunits.co.yu and www.register.co.yu

E-mail : xxxxx@ptt.yu, xxxxx@register.co.yu and xxxxx@alfaunits.co.yu
ICQ# : 56570367
Professional file&system related components and libraries for Win32
developers.
Alfa File Monitor - #1 file monitoring system for Win32 developers.
Alfa File Protector - #1 file protection and hiding system for Win32
developers.
Alfa Units - #1 file and system handling units for Delphi.


You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

Hi Satish,

for a few dollars (15 or 30 I think) you can register yourself for
Scramdisk (the first link I gave you). Once registered, you will have
access to the source code.

Scramdisk has several encryption algorithms implemented, so I think it is a
nice start for you.


Bartjan.

At 02:19 PM 5/7/01 +0530, you wrote:

Hi,

Can i have Sample source code for File Encryption/Decryption Druver in NT.

Regards,
Satish K.S

> Yes you can…
>
> http://www.scramdisk.clara.net
> http://www.stack.nl/~galactus/remailers/index-diskcrypt.html
> http://phystechsoft.com/en/StrongDisk/
> http://www.v-disk.com/index1.htm
>
> Virtual disk device drivers:
> http://www.storagecraft.com, look for SvcDisk
> http://www.acc.umu.se/~bosse/, look for FileDisk
>
> Linux :wink:
> http://linux01.gwdg.de/~alatham/ppdd.html
>
>
> Have fun.
> –
> Bartjan.
>
>
> At 01:45 PM 5/7/01 +0530, you wrote:
> >Hi all,
> >
> >Can i get any File Encryption/Decryption Sample from anywhere ?
> >
> >Thanks in Advance,
> >Satish K.S
> >
> >
> > >
> > > How to Exclude the system files like ntoskrnl.exe, hal.dll or any
other
> >.exe
> > > or .dll which loads before my driver ? Any idea ?
> > >
> > > Regards,
> > > Satish K.S
> > >
> > > > One of the simpliest methods is to apply a summing algo on the
memory
> > > range
> > > > which you want to protect and periodicaly check it. This wont work
for
> > > > hardware breakpoints. But if you write a encryption driver , focus
> >first
> > > on
> > > > implementing it , and leave those details to the end of development
> >cycle.
> > > > Anti -debugging is not so immportant for
> > > > encryption purposes , because if a user can decrypt a file by
> >“debugging”
> > > > your driver , the design you choosed is plain wrong.
> > > >
> > >
> > >
> > >
> > > —
> > > You are currently subscribed to ntfsd as: xxxxx@aalayance.com
> > > To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> >
> >
> >—
> >You are currently subscribed to ntfsd as: xxxxx@zeelandnet.nl
> >To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@aalayance.com
> To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com


You are currently subscribed to ntfsd as: xxxxx@zeelandnet.nl
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com


You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

Hi all,

For Trapping Read and Write to a File, I registed I/O Completion Routine for
IRP_MJ_READ and IRP_MJ_WRITE in my Encryption/Decryption Driver. Do i need
to trap FastIORead and FastIoWrite also or any other thing ?

Regards,
Satish K.S

Thanks a lot. I will try those links.

Regards,
Satish K.S
----- Original Message -----
From: “Bartjan Wattel”
> To: “File Systems Developers”
> Sent: Monday, May 07, 2001 2:04 PM
> Subject: [ntfsd] Re: Encryption Driver
>
>
> > Yes you can…
> >
> > http://www.scramdisk.clara.net
> > http://www.stack.nl/~galactus/remailers/index-diskcrypt.html
> > http://phystechsoft.com/en/StrongDisk/
> > http://www.v-disk.com/index1.htm
> >
> > Virtual disk device drivers:
> > http://www.storagecraft.com, look for SvcDisk
> > http://www.acc.umu.se/~bosse/, look for FileDisk
> >
> > Linux :wink:
> > http://linux01.gwdg.de/~alatham/ppdd.html
> >
> >
> > Have fun.
> > –
> > Bartjan.
> >


You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

That depends on how you are doing the encryption. If you are crypting
the non-cached path (hence the cache will contain plaintext) then you do
not need to do anything with FastIO since it is only used for request
via the cache manager. But if you are crypting the cached path (hence
the cache contains crypted data), then you will need to add cryption
to the FastIO routines.

Shaun

Satish wrote:
>Hi all,
>
>For Trapping Read and Write to a File, I registed I/O Completion Routine for
>IRP_MJ_READ and IRP_MJ_WRITE in my Encryption/Decryption Driver. Do i need
>to trap FastIORead and FastIoWrite also or any other thing ?
>
>Regards,
>Satish K.S
>
>> Thanks a lot. I will try those links.
>>
>> Regards,
>> Satish K.S
>> ----- Original Message -----
>> From: “Bartjan Wattel”
>> To: “File Systems Developers”
>> Sent: Monday, May 07, 2001 2:04 PM
>> Subject: [ntfsd] Re: Encryption Driver
>>
>>
>> > Yes you can…
>> >
>> > http://www.scramdisk.clara.net
>> > http://www.stack.nl/~galactus/remailers/index-diskcrypt.html
>> > http://phystechsoft.com/en/StrongDisk/
>> > http://www.v-disk.com/index1.htm
>> >
>> > Virtual disk device drivers:
>> > http://www.storagecraft.com, look for SvcDisk
>> > http://www.acc.umu.se/~bosse/, look for FileDisk
>> >
>> > Linux :wink:
>> > http://linux01.gwdg.de/~alatham/ppdd.html
>> >
>> >
>> > Have fun.
>> > –
>> > Bartjan.
>> >
>
>
>
>—
>You are currently subscribed to ntfsd as: xxxxx@sdlabs.demon.co.uk
>To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com


You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

> That depends on how you are doing the encryption. If you are crypting

the non-cached path (hence the cache will contain plaintext) then you do
not need to do anything with FastIO since it is only used for request
via the cache manager. But if you are crypting the cached path (hence
the cache contains crypted data), then you will need to add cryption
to the FastIO routines.

Shaun

IRP_MJ_CREATE :
If File already Exists only. I am encrypting Whole file by creating
seperate thread Then i will return control back to User.( If it is new i
dont care )

IRP_MJ_READ :
Decrypting the Data.

*****************

In Normal operation this will work fine.

Do i need to take care FastIoRead functions also. ?? If Yes mean in what
sitiuation i should take care ?

Thanks in advance,
Satish K.S


You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com