when encrypt the ntfs disk data with all data retained.(encrypt with AES by 512 )
The partition opened by CreateFile with the path of “\Device\Harddisk0\Partition1”.
The disk ought to have been encrypt by AES,But some small parts always been confused by somebody.
Just like that :
Left : The result that i read data from the partition and encrypt it .
RIGHT: The result that i read data form the partition after encrypt .
Result by windiff
|—|diff
| |
| |
|—|diff
|—|diff
| |
| |
Dose the partition of ntfs been protected by the feature of the ntfs ? some module make a rollback of transaction?
who wrote back the data by confusion?
While i wrote the partition of ntfs by my data , Could something of ntfs try to affect my data ?
If the partition is not the format of ntfs .every is normal . no confusion.
Truthfully, I’m not even sure I understand what you are saying. Are you
saying “my volume filter works with FAT but not with NTFS”? If so, then
you must be doing something wrong.
There are no secret backdoors to the volume from the file system.
If you mean “I have a file system filter driver that works right on FAT
but not on NTFS” I would ask “is the file in question a small file?” If
so, you might be running into the “resident data attribute” issue that
has been discussed before. But of course there are numerous other
problems that might cause behaviors you don’t expect.
If this is a volume filter, you’d be better of asking about it in NTDEV.
If this is a file system filter driver you might want to provide a bit
more information about the specifics of the failure.
Tony
Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@gmail.com
Sent: Friday, April 20, 2007 10:30 PM
To: ntfsd redirect
Subject: RE:[ntfsd] Problem of encrypt partition of ntfs with all data
retained
While i wrote the partition of ntfs by my data , Could something of ntfs
try to affect my data ?
If the partition is not the format of ntfs .every is normal . no
confusion.
Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
thank you very much , I use ifs .
But i open the deveice \Device\Harddisk0\Partition1 by application of user mode .
Read this deveice by a sector (512 byte) ,Encrypt this secotor it and write back .
and mount a volume by IFS dirver .to decrypt the data that i encrypt .
The partition of fat is normal .But partition of NTFS always been destory partly .
Yeah . I have fond the problem .
I must umount the symbol link of the volume immediately after the partition has been encrypted,
strange ,I couldn`t umount the symbol link befor encrypt it.
thus ,The partitoin could avoid been destory.
If umount was delayed , Some thing would destory the partitoin .
The balloon message of system tray is that “$MftMirr has been destroyed, please run Chkdsk …”