We are developing a MiniFilter driver for encryption/decryption software. Since the software is supposed to run on Microsoft Vista, we are creating a MiniFilter driver rather then a full filter driver. The MiniFilter driver catches I/O calls and encrypts or decrypts data on the fly. We are capturing IRP_MJ calls from FilterManager and then taking necessary actions on the IO.
We are facing few issues in this and I am looking for suitable help. Also we are not sure how to handle memory mapped files.
Regards,
Abhishek
This is one of the most common questions to this list. I’d suggest
searching the archives (type “encryption site:osronline.com” to Google
and you’ll be inundated with the sheer number of times this has been
discussed.)
First hint: you need to focus on the non-cached I/O, not the cached user
I/O. In that instance you won’t CARE about how the application is
accessing the file (read/write, memory mapping, etc.)
Second hint: if you haven’t started using Ladislav’s FileTest utility
(check out the ‘Downloads’ section on OSR Online) you should. It will
allow you to isolate operations, which is much easier than starting with
Explorer and Word (which have complex behaviors.)
Tony
Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com http:</http:>
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Abhishek Sharma
Sent: Wednesday, September 27, 2006 4:50 AM
To: ntfsd redirect
Subject: [ntfsd] FilterDriver
We are developing a MiniFilter driver for encryption/decryption
software. Since the software is supposed to run on Microsoft Vista, we
are creating a MiniFilter driver rather then a full filter driver. The
MiniFilter driver catches I/O calls and encrypts or decrypts data on the
fly. We are capturing IRP_MJ calls from FilterManager and then taking
necessary actions on the IO.
We are facing few issues in this and I am looking for suitable help.
Also we are not sure how to handle memory mapped files.
Regards,
Abhishek
Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as: unknown lmsubst tag argument:
‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com