Re: filter driver about encryption/descryption problem to change file size

Hi, ALL

I am developing an encryption/decryption filter driver. In the IRQ_MJ_WRITE routine, I need to encrypt

The file and add some information to the tail of the file, it will increase the size of the file. When I do that

As following, it doesn$B!G(Jt work,the size still is the same. Anyone can help me?

1$B!“(JAllocate new length buffer for Irp->AssociatedIrp.SystemBuffer$B!((J
2$B!”(Jchanged IrpSp->Parameters.Write.Length to new length$B!((J
3$B!"(Jchanged Irp->IoStatus.Information to new length$B!((J

Thanks

Regards

Bin

Anyone can give me a hint?

Thanks


From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
Sent: Friday, September 16, 2005 11:03 AM
To: Windows File Systems Devs Interest List
Subject: Re:[ntfsd] filter driver about encryption/descryption problem to change file size

Hi, ALL

I am developing an encryption/decryption filter driver. In the IRQ_MJ_WRITE routine, I need to encrypt

The file and add some information to the tail of the file, it will increase the size of the file. When I do that

As following, it doesn$B!G(Jt work,the size still is the same. Anyone can help me?

1$B!“(JAllocate new length buffer for Irp->AssociatedIrp.SystemBuffer$B!((J
2$B!”(Jchanged IrpSp->Parameters.Write.Length to new length$B!((J
3$B!"(Jchanged Irp->IoStatus.Information to new length$B!((J

Thanks

Regards

Bin


Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@evertrust.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

OSR has a file systems class in Los Angeles on the 24th of October. This
problem you found is one of the more interesting to solve. Read about all
parts of the read and write IRPs. Learn how a file’s size is increased.
Write a test program that extends a file and use filespy and sfilter to see
what happens. Get to a grease board and diagram what happens and how you
might fit your problem into what you see and find a solution. Both trailers
and headers have problems your driver must handle.

“Bin Zeng” wrote in message news:xxxxx@ntfsd…
> Anyone can give me a hint?
>
>
>
> Thanks
>
>
>
> ________________________________
>
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
> Sent: Friday, September 16, 2005 11:03 AM
> To: Windows File Systems Devs Interest List
> Subject: Re:[ntfsd] filter driver about encryption/descryption problem to
> change file size
>
>
>
>
>
> Hi, ALL
>
>
>
> I am developing an encryption/decryption filter driver. In the
> IRQ_MJ_WRITE routine, I need to encrypt
>
> The file and add some information to the tail of the file, it will
> increase the size of the file. When I do that
>
> As following, it doesn$B!G(Bt work,the size still is the same. Anyone can help
> me?
>
>
>
> 1$B!“(BAllocate new length buffer for Irp->AssociatedIrp.SystemBuffer$B!((B
> 2$B!”(Bchanged IrpSp->Parameters.Write.Length to new length$B!((B
> 3$B!"(Bchanged Irp->IoStatus.Information to new length$B!((B
>
>
>
> Thanks
>
>
>
> Regards
>
>
>
> Bin
>
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@evertrust.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>

Thanks,David. Unfortunately I am not in USA, I can’t join that class.

Bin

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of David J. Craig
Sent: Monday, September 19, 2005 11:22 AM
To: Windows File Systems Devs Interest List
Subject: Re:[ntfsd] filter driver about encryption/descryption problem
to change file size

OSR has a file systems class in Los Angeles on the 24th of October.
This
problem you found is one of the more interesting to solve. Read about
all
parts of the read and write IRPs. Learn how a file’s size is increased.

Write a test program that extends a file and use filespy and sfilter to
see
what happens. Get to a grease board and diagram what happens and how
you
might fit your problem into what you see and find a solution. Both
trailers
and headers have problems your driver must handle.

“Bin Zeng” wrote in message news:xxxxx@ntfsd…
> Anyone can give me a hint?
>
>
>
> Thanks
>
>
>
> ________________________________
>
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
> Sent: Friday, September 16, 2005 11:03 AM
> To: Windows File Systems Devs Interest List
> Subject: Re:[ntfsd] filter driver about encryption/descryption problem
to
> change file size
>
>
>
>
>
> Hi, ALL
>
>
>
> I am developing an encryption/decryption filter driver. In the
> IRQ_MJ_WRITE routine, I need to encrypt
>
> The file and add some information to the tail of the file, it will
> increase the size of the file. When I do that
>
> As following, it doesn$B!G(Bt work,the size still is the same.
Anyone can help
> me?
>
>
>
> 1$B!“(BAllocate new length buffer for
Irp->AssociatedIrp.SystemBuffer$B!((B
> 2$B!”(Bchanged IrpSp->Parameters.Write.Length to new
length$B!((B
> 3$B!"(Bchanged Irp->IoStatus.Information to new length$B!((B
>
>
>
> Thanks
>
>
>
> Regards
>
>
>
> Bin
>
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@evertrust.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@evertrust.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

You should read the comments in the FastFat source code for the IRP_MJ_WRITE
handler. In particular read the comments in the code dealing with extending
the sizes of the file, there is a large comment block about this. There are
certain pathways which will not extend the file sizes and others which can.

Pete

Kernel Drivers
Windows Filesystem and Device Driver Consulting
www.KernelDrivers.com
(303)546-0300


From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.
com] On Behalf Of Bin Zeng
Sent: Monday, September 19, 2005 6:43 AM
To: Windows File Systems Devs Interest List
Subject: RE: [ntfsd] filter driver about encryption/descryption problem to
change file size

Anyone can give me a hint?

Thanks


From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
Sent: Friday, September 16, 2005 11:03 AM
To: Windows File Systems Devs Interest List
Subject: Re:[ntfsd] filter driver about encryption/descryption problem to
change file size

Hi, ALL

I am developing an encryption/decryption filter driver. In the IRQ_MJ_WRITE
routine, I need to encrypt

The file and add some information to the tail of the file, it will increase
the size of the file. When I do that

As following, it doesn$B!G(Bt work,the size still is the same. Anyone can help
me?

1$B!“(BAllocate new length buffer for Irp->AssociatedIrp.SystemBuffer$B!((B
2$B!”(Bchanged IrpSp->Parameters.Write.Length to new length$B!((B
3$B!"(Bchanged Irp->IoStatus.Information to new length$B!((B

Thanks

Regards

Bin


Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?
id=17

You are currently subscribed to ntfsd as: xxxxx@evertrust.com
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?
id=17

You are currently subscribed to ntfsd as: xxxxx@kerneldrivers.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

The class is actually open to residents of any country, not just the USA

  • in fact I’ve had west-coast based classes where every single person
    attending was from outside the US.

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

Looking forward to seeing you at the next OSR File Systems class in Los
Angeles, CA October 24-27, 2005.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
Sent: Monday, September 19, 2005 11:32 AM
To: ntfsd redirect
Subject: RE: [ntfsd] filter driver about encryption/descryption problem
to change file size

Thanks,David. Unfortunately I am not in USA, I can’t join that class.

Bin

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of David J. Craig
Sent: Monday, September 19, 2005 11:22 AM
To: Windows File Systems Devs Interest List
Subject: Re:[ntfsd] filter driver about encryption/descryption problem
to change file size

OSR has a file systems class in Los Angeles on the 24th of October.
This
problem you found is one of the more interesting to solve. Read about
all
parts of the read and write IRPs. Learn how a file’s size is increased.

Write a test program that extends a file and use filespy and sfilter to
see
what happens. Get to a grease board and diagram what happens and how
you
might fit your problem into what you see and find a solution. Both
trailers
and headers have problems your driver must handle.

“Bin Zeng” wrote in message news:xxxxx@ntfsd…
> Anyone can give me a hint?
>
>
>
> Thanks
>
>
>
> ________________________________
>
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
> Sent: Friday, September 16, 2005 11:03 AM
> To: Windows File Systems Devs Interest List
> Subject: Re:[ntfsd] filter driver about encryption/descryption problem
to
> change file size
>
>
>
>
>
> Hi, ALL
>
>
>
> I am developing an encryption/decryption filter driver. In the
> IRQ_MJ_WRITE routine, I need to encrypt
>
> The file and add some information to the tail of the file, it will
> increase the size of the file. When I do that
>
> As following, it doesn$B!G(Bt work,the size still is the same.
Anyone can help
> me?
>
>
>
> 1$B!“(BAllocate new length buffer for
Irp->AssociatedIrp.SystemBuffer$B!((B
> 2$B!”(Bchanged IrpSp->Parameters.Write.Length to new
length$B!((B
> 3$B!"(Bchanged Irp->IoStatus.Information to new length$B!((B
>
>
>
> Thanks
>
>
>
> Regards
>
>
>
> Bin
>
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@evertrust.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@evertrust.com
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: unknown lmsubst tag argument:
‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

I plugged it, but maybe it has something to do with the story about the
horse and water. If someone wants to write file systems or file systems
filters, the class is the only one I know about and it is necessary. Maybe
a PlugFest could substitute if someone was an expert in storage drivers and
a few other legacy drivers. The filter manager may reduce the requirement,
but from the questions I see, active filters are still a bear to implement
with encryption being one of the most difficult.

“Tony Mason” wrote in message news:xxxxx@ntfsd…
The class is actually open to residents of any country, not just the USA
- in fact I’ve had west-coast based classes where every single person
attending was from outside the US.

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

Looking forward to seeing you at the next OSR File Systems class in Los
Angeles, CA October 24-27, 2005.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
Sent: Monday, September 19, 2005 11:32 AM
To: ntfsd redirect
Subject: RE: [ntfsd] filter driver about encryption/descryption problem
to change file size

Thanks,David. Unfortunately I am not in USA, I can’t join that class.

Bin

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of David J. Craig
Sent: Monday, September 19, 2005 11:22 AM
To: Windows File Systems Devs Interest List
Subject: Re:[ntfsd] filter driver about encryption/descryption problem
to change file size

OSR has a file systems class in Los Angeles on the 24th of October.
This
problem you found is one of the more interesting to solve. Read about
all
parts of the read and write IRPs. Learn how a file’s size is increased.

Write a test program that extends a file and use filespy and sfilter to
see
what happens. Get to a grease board and diagram what happens and how
you
might fit your problem into what you see and find a solution. Both
trailers
and headers have problems your driver must handle.

“Bin Zeng” wrote in message news:xxxxx@ntfsd…
> Anyone can give me a hint?
>
>
>
> Thanks
>
>
>
> ________________________________
>
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
> Sent: Friday, September 16, 2005 11:03 AM
> To: Windows File Systems Devs Interest List
> Subject: Re:[ntfsd] filter driver about encryption/descryption problem
to
> change file size
>
>
>
>
>
> Hi, ALL
>
>
>
> I am developing an encryption/decryption filter driver. In the
> IRQ_MJ_WRITE routine, I need to encrypt
>
> The file and add some information to the tail of the file, it will
> increase the size of the file. When I do that
>
> As following, it doesn$B!G(Bt work,the size still is the same.
Anyone can help
> me?
>
>
>
> 1$B!“(BAllocate new length buffer for
Irp->AssociatedIrp.SystemBuffer$B!((B
> 2$B!”(Bchanged IrpSp->Parameters.Write.Length to new
length$B!((B
> 3$B!"(Bchanged Irp->IoStatus.Information to new length$B!((B
>
>
>
> Thanks
>
>
>
> Regards
>
>
>
> Bin
>
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@evertrust.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@evertrust.com
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: unknown lmsubst tag argument:
‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

David,

You tried, the problem is that they will go off without this and write
CRAP. Worse yet they will set the expectations of what a filter will cost
so low, that when the customer gets it and see problems they will think it
should be fixable for a few $$$.

The last three companies that have approached me for file system work,
all had filters written by people who did not take the class, or spend the
time to learn. All three were at best TOXIX WASTE, and the customer thought
that it was fixable for a few thousand! When I explained that the best
thing they could do is destroy all copies and start over, they went of and
found another contractor like the idiot who wrote it in the first place.


Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Remove StopSpam from the email to reply

“David J. Craig” wrote in message
news:xxxxx@ntfsd…
>I plugged it, but maybe it has something to do with the story about the
>horse and water. If someone wants to write file systems or file systems
>filters, the class is the only one I know about and it is necessary. Maybe
>a PlugFest could substitute if someone was an expert in storage drivers and
>a few other legacy drivers. The filter manager may reduce the requirement,
>but from the questions I see, active filters are still a bear to implement
>with encryption being one of the most difficult.
>
> “Tony Mason” wrote in message news:xxxxx@ntfsd…
> The class is actually open to residents of any country, not just the USA
> - in fact I’ve had west-coast based classes where every single person
> attending was from outside the US.
>
> Tony Mason
> Consulting Partner
> OSR Open Systems Resources, Inc.
> http://www.osr.com
>
>
> Looking forward to seeing you at the next OSR File Systems class in Los
> Angeles, CA October 24-27, 2005.
>
>
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
> Sent: Monday, September 19, 2005 11:32 AM
> To: ntfsd redirect
> Subject: RE: [ntfsd] filter driver about encryption/descryption problem
> to change file size
>
> Thanks,David. Unfortunately I am not in USA, I can’t join that class.
>
> Bin
>
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of David J. Craig
> Sent: Monday, September 19, 2005 11:22 AM
> To: Windows File Systems Devs Interest List
> Subject: Re:[ntfsd] filter driver about encryption/descryption problem
> to change file size
>
> OSR has a file systems class in Los Angeles on the 24th of October.
> This
> problem you found is one of the more interesting to solve. Read about
> all
> parts of the read and write IRPs. Learn how a file’s size is increased.
>
> Write a test program that extends a file and use filespy and sfilter to
> see
> what happens. Get to a grease board and diagram what happens and how
> you
> might fit your problem into what you see and find a solution. Both
> trailers
> and headers have problems your driver must handle.
>
> “Bin Zeng” wrote in message news:xxxxx@ntfsd…
>> Anyone can give me a hint?
>>
>>
>>
>> Thanks
>>
>>
>>
>> ________________________________
>>
>> From: xxxxx@lists.osr.com
>> [mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
>> Sent: Friday, September 16, 2005 11:03 AM
>> To: Windows File Systems Devs Interest List
>> Subject: Re:[ntfsd] filter driver about encryption/descryption problem
> to
>> change file size
>>
>>
>>
>>
>>
>> Hi, ALL
>>
>>
>>
>> I am developing an encryption/decryption filter driver. In the
>> IRQ_MJ_WRITE routine, I need to encrypt
>>
>> The file and add some information to the tail of the file, it will
>> increase the size of the file. When I do that
>>
>> As following, it doesn$B!G(Bt work,the size still is the same.
> Anyone can help
>> me?
>>
>>
>>
>> 1$B!“(BAllocate new length buffer for
> Irp->AssociatedIrp.SystemBuffer$B!((B
>> 2$B!”(Bchanged IrpSp->Parameters.Write.Length to new
> length$B!((B
>> 3$B!"(Bchanged Irp->IoStatus.Information to new length$B!((B
>>
>>
>>
>> Thanks
>>
>>
>>
>> Regards
>>
>>
>>
>> Bin
>>
>>
>> —
>> Questions? First check the IFS FAQ at
>> https://www.osronline.com/article.cfm?id=17
>>
>> You are currently subscribed to ntfsd as: xxxxx@evertrust.com
>> To unsubscribe send a blank email to xxxxx@lists.osr.com
>>
>>
>
>
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@evertrust.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: unknown lmsubst tag argument:
> ‘’
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
>

I am sure you would do it for a ‘few’ thousand - 50 to 80 maybe. In the
U.S. that would be a ‘few’, but I bet they were thinking of 3 to 5 at most.
Did you go and destroy their dream world? That is so ‘not nice’ of you. I
guess for an effective encryption file systems filter, it would cost more
since you may have to buy the RSA toolkit for them with, IIRC, a $50,000
starting price. It was so nice when I had those type of resources
available, such as when I worked for Addison Fischer, a cryptographer. I
can implement the code, but I sure don’t even want to try doing it all by
myself. You need others to validate your work, especially random number
calls for session/symmetric keys. If you restrain the range and period of
those numbers, you have only an appearance of protection.

I wonder how long it will be before AMD and Intel start producing quad core
CPUs. That and enough memory and brute force attacks on crypto become
available to the masses or a big part of them. I wondered why someone
doesn’t make a cpu with registers in the 8,192 bit size. That should allow
attacks on the factors that make up a lot of encryption algorithms today.
If you can afford tens of millions of transistors on a single die in a dual
core cpu, why not just start making really big registers? Very few sales,
but it could be done.

Paranoid, tired, and talkative today I guess. But, just because I’m
paranoid, it doesn’t mean that the whole world is not out to get me, my
money, or something.

“Don Burn” wrote in message news:xxxxx@ntfsd…
> David,
>
> You tried, the problem is that they will go off without this and write
> CRAP. Worse yet they will set the expectations of what a filter will cost
> so low, that when the customer gets it and see problems they will think it
> should be fixable for a few $$$.
>
> The last three companies that have approached me for file system work,
> all had filters written by people who did not take the class, or spend the
> time to learn. All three were at best TOXIX WASTE, and the customer
> thought that it was fixable for a few thousand! When I explained that the
> best thing they could do is destroy all copies and start over, they went
> of and found another contractor like the idiot who wrote it in the first
> place.
>
>
> –
> Don Burn (MVP, Windows DDK)
> Windows 2k/XP/2k3 Filesystem and Driver Consulting
> Remove StopSpam from the email to reply
>
>
>
> “David J. Craig” wrote in message
> news:xxxxx@ntfsd…
>>I plugged it, but maybe it has something to do with the story about the
>>horse and water. If someone wants to write file systems or file systems
>>filters, the class is the only one I know about and it is necessary.
>>Maybe a PlugFest could substitute if someone was an expert in storage
>>drivers and a few other legacy drivers. The filter manager may reduce the
>>requirement, but from the questions I see, active filters are still a bear
>>to implement with encryption being one of the most difficult.
>>
>> “Tony Mason” wrote in message news:xxxxx@ntfsd…
>> The class is actually open to residents of any country, not just the USA
>> - in fact I’ve had west-coast based classes where every single person
>> attending was from outside the US.
>>
>> Tony Mason
>> Consulting Partner
>> OSR Open Systems Resources, Inc.
>> http://www.osr.com
>>
>>
>> Looking forward to seeing you at the next OSR File Systems class in Los
>> Angeles, CA October 24-27, 2005.
>>
>>
>> -----Original Message-----
>> From: xxxxx@lists.osr.com
>> [mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
>> Sent: Monday, September 19, 2005 11:32 AM
>> To: ntfsd redirect
>> Subject: RE: [ntfsd] filter driver about encryption/descryption problem
>> to change file size
>>
>> Thanks,David. Unfortunately I am not in USA, I can’t join that class.
>>
>> Bin
>>
>> -----Original Message-----
>> From: xxxxx@lists.osr.com
>> [mailto:xxxxx@lists.osr.com] On Behalf Of David J. Craig
>> Sent: Monday, September 19, 2005 11:22 AM
>> To: Windows File Systems Devs Interest List
>> Subject: Re:[ntfsd] filter driver about encryption/descryption problem
>> to change file size
>>
>> OSR has a file systems class in Los Angeles on the 24th of October.
>> This
>> problem you found is one of the more interesting to solve. Read about
>> all
>> parts of the read and write IRPs. Learn how a file’s size is increased.
>>
>> Write a test program that extends a file and use filespy and sfilter to
>> see
>> what happens. Get to a grease board and diagram what happens and how
>> you
>> might fit your problem into what you see and find a solution. Both
>> trailers
>> and headers have problems your driver must handle.
>>
>> “Bin Zeng” wrote in message news:xxxxx@ntfsd…
>>> Anyone can give me a hint?
>>>
>>>
>>>
>>> Thanks
>>>
>>>
>>>
>>> ________________________________
>>>
>>> From: xxxxx@lists.osr.com
>>> [mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
>>> Sent: Friday, September 16, 2005 11:03 AM
>>> To: Windows File Systems Devs Interest List
>>> Subject: Re:[ntfsd] filter driver about encryption/descryption problem
>> to
>>> change file size
>>>
>>>
>>>
>>>
>>>
>>> Hi, ALL
>>>
>>>
>>>
>>> I am developing an encryption/decryption filter driver. In the
>>> IRQ_MJ_WRITE routine, I need to encrypt
>>>
>>> The file and add some information to the tail of the file, it will
>>> increase the size of the file. When I do that
>>>
>>> As following, it doesn$B!G(Bt work,the size still is the same.
>> Anyone can help
>>> me?
>>>
>>>
>>>
>>> 1$B!“(BAllocate new length buffer for
>> Irp->AssociatedIrp.SystemBuffer$B!((B
>>> 2$B!”(Bchanged IrpSp->Parameters.Write.Length to new
>> length$B!((B
>>> 3$B!"(Bchanged Irp->IoStatus.Information to new length$B!((B
>>>
>>>
>>>
>>> Thanks
>>>
>>>
>>>
>>> Regards
>>>
>>>
>>>
>>> Bin
>>>
>>>
>>> —
>>> Questions? First check the IFS FAQ at
>>> https://www.osronline.com/article.cfm?id=17
>>>
>>> You are currently subscribed to ntfsd as: xxxxx@evertrust.com
>>> To unsubscribe send a blank email to xxxxx@lists.osr.com
>>>
>>>
>>
>>
>>
>> —
>> Questions? First check the IFS FAQ at
>> https://www.osronline.com/article.cfm?id=17
>>
>> You are currently subscribed to ntfsd as: xxxxx@evertrust.com
>> To unsubscribe send a blank email to xxxxx@lists.osr.com
>>
>> —
>> Questions? First check the IFS FAQ at
>> https://www.osronline.com/article.cfm?id=17
>>
>> You are currently subscribed to ntfsd as: unknown lmsubst tag argument:
>> ‘’
>> To unsubscribe send a blank email to xxxxx@lists.osr.com
>>
>>
>>
>
>
>

Actually, they were US firms, and the number was 2! In one case, I ran
Iometer on their filter (it supposedly worked, but was missing some
functionality), it slowed down by 3 orders of magnitude (yep 1/1000th of the
performance without the filter). The customer felt this should be fixable
for a few hundred dollars, with the rest to cover the enhancements.

No wonder Walter Oney is going back to being a lawyer.


Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Remove StopSpam from the email to reply

“David J. Craig” wrote in message
news:xxxxx@ntfsd…
>I am sure you would do it for a ‘few’ thousand - 50 to 80 maybe. In the
>U.S. that would be a ‘few’, but I bet they were thinking of 3 to 5 at most.
>Did you go and destroy their dream world? That is so ‘not nice’ of you. I
>guess for an effective encryption file systems filter, it would cost more
>since you may have to buy the RSA toolkit for them with, IIRC, a $50,000
>starting price. It was so nice when I had those type of resources
>available, such as when I worked for Addison Fischer, a cryptographer. I
>can implement the code, but I sure don’t even want to try doing it all by
>myself. You need others to validate your work, especially random number
>calls for session/symmetric keys. If you restrain the range and period of
>those numbers, you have only an appearance of protection.
>
> I wonder how long it will be before AMD and Intel start producing quad
> core CPUs. That and enough memory and brute force attacks on crypto
> become available to the masses or a big part of them. I wondered why
> someone doesn’t make a cpu with registers in the 8,192 bit size. That
> should allow attacks on the factors that make up a lot of encryption
> algorithms today. If you can afford tens of millions of transistors on a
> single die in a dual core cpu, why not just start making really big
> registers? Very few sales, but it could be done.
>
> Paranoid, tired, and talkative today I guess. But, just because I’m
> paranoid, it doesn’t mean that the whole world is not out to get me, my
> money, or something.
>
> “Don Burn” wrote in message news:xxxxx@ntfsd…
>> David,
>>
>> You tried, the problem is that they will go off without this and write
>> CRAP. Worse yet they will set the expectations of what a filter will
>> cost so low, that when the customer gets it and see problems they will
>> think it should be fixable for a few $$$.
>>
>> The last three companies that have approached me for file system
>> work, all had filters written by people who did not take the class, or
>> spend the time to learn. All three were at best TOXIX WASTE, and the
>> customer thought that it was fixable for a few thousand! When I
>> explained that the best thing they could do is destroy all copies and
>> start over, they went of and found another contractor like the idiot who
>> wrote it in the first place.
>>
>>
>> –
>> Don Burn (MVP, Windows DDK)
>> Windows 2k/XP/2k3 Filesystem and Driver Consulting
>> Remove StopSpam from the email to reply
>>
>>
>>
>> “David J. Craig” wrote in message
>> news:xxxxx@ntfsd…
>>>I plugged it, but maybe it has something to do with the story about the
>>>horse and water. If someone wants to write file systems or file systems
>>>filters, the class is the only one I know about and it is necessary.
>>>Maybe a PlugFest could substitute if someone was an expert in storage
>>>drivers and a few other legacy drivers. The filter manager may reduce
>>>the requirement, but from the questions I see, active filters are still a
>>>bear to implement with encryption being one of the most difficult.
>>>
>>> “Tony Mason” wrote in message news:xxxxx@ntfsd…
>>> The class is actually open to residents of any country, not just the USA
>>> - in fact I’ve had west-coast based classes where every single person
>>> attending was from outside the US.
>>>
>>> Tony Mason
>>> Consulting Partner
>>> OSR Open Systems Resources, Inc.
>>> http://www.osr.com
>>>
>>>
>>> Looking forward to seeing you at the next OSR File Systems class in Los
>>> Angeles, CA October 24-27, 2005.
>>>
>>>
>>> -----Original Message-----
>>> From: xxxxx@lists.osr.com
>>> [mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
>>> Sent: Monday, September 19, 2005 11:32 AM
>>> To: ntfsd redirect
>>> Subject: RE: [ntfsd] filter driver about encryption/descryption problem
>>> to change file size
>>>
>>> Thanks,David. Unfortunately I am not in USA, I can’t join that class.
>>>
>>> Bin
>>>
>>> -----Original Message-----
>>> From: xxxxx@lists.osr.com
>>> [mailto:xxxxx@lists.osr.com] On Behalf Of David J. Craig
>>> Sent: Monday, September 19, 2005 11:22 AM
>>> To: Windows File Systems Devs Interest List
>>> Subject: Re:[ntfsd] filter driver about encryption/descryption problem
>>> to change file size
>>>
>>> OSR has a file systems class in Los Angeles on the 24th of October.
>>> This
>>> problem you found is one of the more interesting to solve. Read about
>>> all
>>> parts of the read and write IRPs. Learn how a file’s size is increased.
>>>
>>> Write a test program that extends a file and use filespy and sfilter to
>>> see
>>> what happens. Get to a grease board and diagram what happens and how
>>> you
>>> might fit your problem into what you see and find a solution. Both
>>> trailers
>>> and headers have problems your driver must handle.
>>>
>>> “Bin Zeng” wrote in message news:xxxxx@ntfsd…
>>>> Anyone can give me a hint?
>>>>
>>>>
>>>>
>>>> Thanks
>>>>
>>>>
>>>>
>>>> ________________________________
>>>>
>>>> From: xxxxx@lists.osr.com
>>>> [mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
>>>> Sent: Friday, September 16, 2005 11:03 AM
>>>> To: Windows File Systems Devs Interest List
>>>> Subject: Re:[ntfsd] filter driver about encryption/descryption problem
>>> to
>>>> change file size
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> Hi, ALL
>>>>
>>>>
>>>>
>>>> I am developing an encryption/decryption filter driver. In the
>>>> IRQ_MJ_WRITE routine, I need to encrypt
>>>>
>>>> The file and add some information to the tail of the file, it will
>>>> increase the size of the file. When I do that
>>>>
>>>> As following, it doesn$B!G(Bt work,the size still is the same.
>>> Anyone can help
>>>> me?
>>>>
>>>>
>>>>
>>>> 1$B!“(BAllocate new length buffer for
>>> Irp->AssociatedIrp.SystemBuffer$B!((B
>>>> 2$B!”(Bchanged IrpSp->Parameters.Write.Length to new
>>> length$B!((B
>>>> 3$B!"(Bchanged Irp->IoStatus.Information to new length$B!((B
>>>>
>>>>
>>>>
>>>> Thanks
>>>>
>>>>
>>>>
>>>> Regards
>>>>
>>>>
>>>>
>>>> Bin
>>>>
>>>>
>>>> —
>>>> Questions? First check the IFS FAQ at
>>>> https://www.osronline.com/article.cfm?id=17
>>>>
>>>> You are currently subscribed to ntfsd as: xxxxx@evertrust.com
>>>> To unsubscribe send a blank email to xxxxx@lists.osr.com
>>>>
>>>>
>>>
>>>
>>>
>>> —
>>> Questions? First check the IFS FAQ at
>>> https://www.osronline.com/article.cfm?id=17
>>>
>>> You are currently subscribed to ntfsd as: xxxxx@evertrust.com
>>> To unsubscribe send a blank email to xxxxx@lists.osr.com
>>>
>>> —
>>> Questions? First check the IFS FAQ at
>>> https://www.osronline.com/article.cfm?id=17
>>>
>>> You are currently subscribed to ntfsd as: unknown lmsubst tag argument:
>>> ‘’
>>> To unsubscribe send a blank email to xxxxx@lists.osr.com
>>>
>>>
>>>
>>
>>
>>
>
>
>

I agree. The filter manager does nothing to change
the fact that one must be an expert to do filter work.
It just makes it easier/faster for the expert to get
the job done. Plus a few other goodies like unload.

— “David J. Craig” wrote:

> The filter manager may
> reduce the requirement,
> but from the questions I see, active filters are
> still a bear to implement
> with encryption being one of the most difficult.

I want that driver. It would be the perfect example and should be saved for
posterity. I sure hope you know the authors’ names as they should be
memorialized for all history. It reminds me of a story I heard one time
about cards and tapes. Read one card and update the tape copying it from
beginning to end, then requesting a new tape to do the next card. I sure
wish I could remember for certain who told me about that, but I am pretty
sure that he didn’t say who the author was. That might be worse than your
example, but I am certain it was told to me in the 1970’s.

Are those US firms still in business? I hope not. Maybe they are doing
these commercials that I see for a lawyer to settle your tax debt with the
IRS for $20. Maybe used cars.

“Don Burn” wrote in message news:xxxxx@ntfsd…
> Actually, they were US firms, and the number was 2! In one case, I ran
> Iometer on their filter (it supposedly worked, but was missing some
> functionality), it slowed down by 3 orders of magnitude (yep 1/1000th of
> the performance without the filter). The customer felt this should be
> fixable for a few hundred dollars, with the rest to cover the
> enhancements.
>
> No wonder Walter Oney is going back to being a lawyer.
>
>
> –
> Don Burn (MVP, Windows DDK)
> Windows 2k/XP/2k3 Filesystem and Driver Consulting
> Remove StopSpam from the email to reply
>
>
>
> “David J. Craig” wrote in message
> news:xxxxx@ntfsd…
>>I am sure you would do it for a ‘few’ thousand - 50 to 80 maybe. In the
>>U.S. that would be a ‘few’, but I bet they were thinking of 3 to 5 at
>>most. Did you go and destroy their dream world? That is so ‘not nice’ of
>>you. I guess for an effective encryption file systems filter, it would
>>cost more since you may have to buy the RSA toolkit for them with, IIRC, a
>>$50,000 starting price. It was so nice when I had those type of resources
>>available, such as when I worked for Addison Fischer, a cryptographer. I
>>can implement the code, but I sure don’t even want to try doing it all by
>>myself. You need others to validate your work, especially random number
>>calls for session/symmetric keys. If you restrain the range and period of
>>those numbers, you have only an appearance of protection.
>>
>> I wonder how long it will be before AMD and Intel start producing quad
>> core CPUs. That and enough memory and brute force attacks on crypto
>> become available to the masses or a big part of them. I wondered why
>> someone doesn’t make a cpu with registers in the 8,192 bit size. That
>> should allow attacks on the factors that make up a lot of encryption
>> algorithms today. If you can afford tens of millions of transistors on a
>> single die in a dual core cpu, why not just start making really big
>> registers? Very few sales, but it could be done.
>>
>> Paranoid, tired, and talkative today I guess. But, just because I’m
>> paranoid, it doesn’t mean that the whole world is not out to get me, my
>> money, or something.
>>
>> “Don Burn” wrote in message news:xxxxx@ntfsd…
>>> David,
>>>
>>> You tried, the problem is that they will go off without this and
>>> write CRAP. Worse yet they will set the expectations of what a filter
>>> will cost so low, that when the customer gets it and see problems they
>>> will think it should be fixable for a few $$$.
>>>
>>> The last three companies that have approached me for file system
>>> work, all had filters written by people who did not take the class, or
>>> spend the time to learn. All three were at best TOXIX WASTE, and the
>>> customer thought that it was fixable for a few thousand! When I
>>> explained that the best thing they could do is destroy all copies and
>>> start over, they went of and found another contractor like the idiot who
>>> wrote it in the first place.
>>>
>>>
>>> –
>>> Don Burn (MVP, Windows DDK)
>>> Windows 2k/XP/2k3 Filesystem and Driver Consulting
>>> Remove StopSpam from the email to reply
>>>
>>>
>>>
>>> “David J. Craig” wrote in message
>>> news:xxxxx@ntfsd…
>>>>I plugged it, but maybe it has something to do with the story about the
>>>>horse and water. If someone wants to write file systems or file systems
>>>>filters, the class is the only one I know about and it is necessary.
>>>>Maybe a PlugFest could substitute if someone was an expert in storage
>>>>drivers and a few other legacy drivers. The filter manager may reduce
>>>>the requirement, but from the questions I see, active filters are still
>>>>a bear to implement with encryption being one of the most difficult.
>>>>
>>>> “Tony Mason” wrote in message news:xxxxx@ntfsd…
>>>> The class is actually open to residents of any country, not just the
>>>> USA
>>>> - in fact I’ve had west-coast based classes where every single person
>>>> attending was from outside the US.
>>>>
>>>> Tony Mason
>>>> Consulting Partner
>>>> OSR Open Systems Resources, Inc.
>>>> http://www.osr.com
>>>>
>>>>
>>>> Looking forward to seeing you at the next OSR File Systems class in Los
>>>> Angeles, CA October 24-27, 2005.
>>>>
>>>>
>>>> -----Original Message-----
>>>> From: xxxxx@lists.osr.com
>>>> [mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
>>>> Sent: Monday, September 19, 2005 11:32 AM
>>>> To: ntfsd redirect
>>>> Subject: RE: [ntfsd] filter driver about encryption/descryption problem
>>>> to change file size
>>>>
>>>> Thanks,David. Unfortunately I am not in USA, I can’t join that class.
>>>>
>>>> Bin
>>>>
>>>> -----Original Message-----
>>>> From: xxxxx@lists.osr.com
>>>> [mailto:xxxxx@lists.osr.com] On Behalf Of David J. Craig
>>>> Sent: Monday, September 19, 2005 11:22 AM
>>>> To: Windows File Systems Devs Interest List
>>>> Subject: Re:[ntfsd] filter driver about encryption/descryption problem
>>>> to change file size
>>>>
>>>> OSR has a file systems class in Los Angeles on the 24th of October.
>>>> This
>>>> problem you found is one of the more interesting to solve. Read about
>>>> all
>>>> parts of the read and write IRPs. Learn how a file’s size is
>>>> increased.
>>>>
>>>> Write a test program that extends a file and use filespy and sfilter to
>>>> see
>>>> what happens. Get to a grease board and diagram what happens and how
>>>> you
>>>> might fit your problem into what you see and find a solution. Both
>>>> trailers
>>>> and headers have problems your driver must handle.
>>>>
>>>> “Bin Zeng” wrote in message
>>>> news:xxxxx@ntfsd…
>>>>> Anyone can give me a hint?
>>>>>
>>>>>
>>>>>
>>>>> Thanks
>>>>>
>>>>>
>>>>>
>>>>> ________________________________
>>>>>
>>>>> From: xxxxx@lists.osr.com
>>>>> [mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
>>>>> Sent: Friday, September 16, 2005 11:03 AM
>>>>> To: Windows File Systems Devs Interest List
>>>>> Subject: Re:[ntfsd] filter driver about encryption/descryption problem
>>>> to
>>>>> change file size
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Hi, ALL
>>>>>
>>>>>
>>>>>
>>>>> I am developing an encryption/decryption filter driver. In the
>>>>> IRQ_MJ_WRITE routine, I need to encrypt
>>>>>
>>>>> The file and add some information to the tail of the file, it will
>>>>> increase the size of the file. When I do that
>>>>>
>>>>> As following, it doesn$B!G(Bt work,the size still is the same.
>>>> Anyone can help
>>>>> me?
>>>>>
>>>>>
>>>>>
>>>>> 1$B!“(BAllocate new length buffer for
>>>> Irp->AssociatedIrp.SystemBuffer$B!((B
>>>>> 2$B!”(Bchanged IrpSp->Parameters.Write.Length to new
>>>> length$B!((B
>>>>> 3$B!"(Bchanged Irp->IoStatus.Information to new length$B!((B
>>>>>
>>>>>
>>>>>
>>>>> Thanks
>>>>>
>>>>>
>>>>>
>>>>> Regards
>>>>>
>>>>>
>>>>>
>>>>> Bin
>>>>>
>>>>>
>>>>> —
>>>>> Questions? First check the IFS FAQ at
>>>>> https://www.osronline.com/article.cfm?id=17
>>>>>
>>>>> You are currently subscribed to ntfsd as: xxxxx@evertrust.com
>>>>> To unsubscribe send a blank email to xxxxx@lists.osr.com
>>>>>
>>>>>
>>>>
>>>>
>>>>
>>>> —
>>>> Questions? First check the IFS FAQ at
>>>> https://www.osronline.com/article.cfm?id=17
>>>>
>>>> You are currently subscribed to ntfsd as: xxxxx@evertrust.com
>>>> To unsubscribe send a blank email to xxxxx@lists.osr.com
>>>>
>>>> —
>>>> Questions? First check the IFS FAQ at
>>>> https://www.osronline.com/article.cfm?id=17
>>>>
>>>> You are currently subscribed to ntfsd as: unknown lmsubst tag argument:
>>>> ‘’
>>>> To unsubscribe send a blank email to xxxxx@lists.osr.com
>>>>
>>>>
>>>>
>>>
>>>
>>>
>>
>>
>>
>
>
>

It does solve the problems associated with obtaining the file name. Just so
much easier. Have you ever seen an active filter handle 24 hours of
IoStress? If so, that is a good start. I did see it when I was at PlugFest
in May.

“Randy Cook” wrote in message news:xxxxx@ntfsd…
>I agree. The filter manager does nothing to change
> the fact that one must be an expert to do filter work.
> It just makes it easier/faster for the expert to get
> the job done. Plus a few other goodies like unload.
>
> — “David J. Craig” wrote:
>
>> The filter manager may
>> reduce the requirement,
>> but from the questions I see, active filters are
>> still a bear to implement
>> with encryption being one of the most difficult.
>
>

I don’t know if the ultimate customer is still in business, the US
consulting firm that produced the crap still is in business, claiming to be
experts in Windows drivers (and a lot of other things). The driver in
question, for any operation to file system did multiple ZwOpen’s,
ZwWriteFile’s and ZwCloses with some special code to handle recursion, that
did more painful operations!

Things were slow enough for me, that I offerred them a good discount, on a
fixed price, with my standard 1 year warranty, no dice. Turn’s out the
original customer had spec’d 10K for the whole thing, and as a consulting
firm they need over 50% overhead.


Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Remove StopSpam from the email to reply

“David J. Craig” wrote in message
news:xxxxx@ntfsd…
>I want that driver. It would be the perfect example and should be saved
>for posterity. I sure hope you know the authors’ names as they should be
>memorialized for all history. It reminds me of a story I heard one time
>about cards and tapes. Read one card and update the tape copying it from
>beginning to end, then requesting a new tape to do the next card. I sure
>wish I could remember for certain who told me about that, but I am pretty
>sure that he didn’t say who the author was. That might be worse than your
>example, but I am certain it was told to me in the 1970’s.
>
> Are those US firms still in business? I hope not. Maybe they are doing
> these commercials that I see for a lawyer to settle your tax debt with the
> IRS for $20. Maybe used cars.
>
> “Don Burn” wrote in message news:xxxxx@ntfsd…
>> Actually, they were US firms, and the number was 2! In one case, I ran
>> Iometer on their filter (it supposedly worked, but was missing some
>> functionality), it slowed down by 3 orders of magnitude (yep 1/1000th of
>> the performance without the filter). The customer felt this should be
>> fixable for a few hundred dollars, with the rest to cover the
>> enhancements.
>>
>> No wonder Walter Oney is going back to being a lawyer.
>>
>>
>> –
>> Don Burn (MVP, Windows DDK)
>> Windows 2k/XP/2k3 Filesystem and Driver Consulting
>> Remove StopSpam from the email to reply
>>
>>
>>
>> “David J. Craig” wrote in message
>> news:xxxxx@ntfsd…
>>>I am sure you would do it for a ‘few’ thousand - 50 to 80 maybe. In the
>>>U.S. that would be a ‘few’, but I bet they were thinking of 3 to 5 at
>>>most. Did you go and destroy their dream world? That is so ‘not nice’ of
>>>you. I guess for an effective encryption file systems filter, it would
>>>cost more since you may have to buy the RSA toolkit for them with, IIRC,
>>>a $50,000 starting price. It was so nice when I had those type of
>>>resources available, such as when I worked for Addison Fischer, a
>>>cryptographer. I can implement the code, but I sure don’t even want to
>>>try doing it all by myself. You need others to validate your work,
>>>especially random number calls for session/symmetric keys. If you
>>>restrain the range and period of those numbers, you have only an
>>>appearance of protection.
>>>
>>> I wonder how long it will be before AMD and Intel start producing quad
>>> core CPUs. That and enough memory and brute force attacks on crypto
>>> become available to the masses or a big part of them. I wondered why
>>> someone doesn’t make a cpu with registers in the 8,192 bit size. That
>>> should allow attacks on the factors that make up a lot of encryption
>>> algorithms today. If you can afford tens of millions of transistors on a
>>> single die in a dual core cpu, why not just start making really big
>>> registers? Very few sales, but it could be done.
>>>
>>> Paranoid, tired, and talkative today I guess. But, just because I’m
>>> paranoid, it doesn’t mean that the whole world is not out to get me, my
>>> money, or something.
>>>
>>> “Don Burn” wrote in message news:xxxxx@ntfsd…
>>>> David,
>>>>
>>>> You tried, the problem is that they will go off without this and
>>>> write CRAP. Worse yet they will set the expectations of what a filter
>>>> will cost so low, that when the customer gets it and see problems they
>>>> will think it should be fixable for a few $$$.
>>>>
>>>> The last three companies that have approached me for file system
>>>> work, all had filters written by people who did not take the class, or
>>>> spend the time to learn. All three were at best TOXIX WASTE, and the
>>>> customer thought that it was fixable for a few thousand! When I
>>>> explained that the best thing they could do is destroy all copies and
>>>> start over, they went of and found another contractor like the idiot
>>>> who wrote it in the first place.
>>>>
>>>>
>>>> –
>>>> Don Burn (MVP, Windows DDK)
>>>> Windows 2k/XP/2k3 Filesystem and Driver Consulting
>>>> Remove StopSpam from the email to reply
>>>>
>>>>
>>>>
>>>> “David J. Craig” wrote in message
>>>> news:xxxxx@ntfsd…
>>>>>I plugged it, but maybe it has something to do with the story about the
>>>>>horse and water. If someone wants to write file systems or file
>>>>>systems filters, the class is the only one I know about and it is
>>>>>necessary. Maybe a PlugFest could substitute if someone was an expert
>>>>>in storage drivers and a few other legacy drivers. The filter manager
>>>>>may reduce the requirement, but from the questions I see, active
>>>>>filters are still a bear to implement with encryption being one of the
>>>>>most difficult.
>>>>>
>>>>> “Tony Mason” wrote in message news:xxxxx@ntfsd…
>>>>> The class is actually open to residents of any country, not just the
>>>>> USA
>>>>> - in fact I’ve had west-coast based classes where every single person
>>>>> attending was from outside the US.
>>>>>
>>>>> Tony Mason
>>>>> Consulting Partner
>>>>> OSR Open Systems Resources, Inc.
>>>>> http://www.osr.com
>>>>>
>>>>>
>>>>> Looking forward to seeing you at the next OSR File Systems class in
>>>>> Los
>>>>> Angeles, CA October 24-27, 2005.
>>>>>
>>>>>
>>>>> -----Original Message-----
>>>>> From: xxxxx@lists.osr.com
>>>>> [mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
>>>>> Sent: Monday, September 19, 2005 11:32 AM
>>>>> To: ntfsd redirect
>>>>> Subject: RE: [ntfsd] filter driver about encryption/descryption
>>>>> problem
>>>>> to change file size
>>>>>
>>>>> Thanks,David. Unfortunately I am not in USA, I can’t join that class.
>>>>>
>>>>> Bin
>>>>>
>>>>> -----Original Message-----
>>>>> From: xxxxx@lists.osr.com
>>>>> [mailto:xxxxx@lists.osr.com] On Behalf Of David J. Craig
>>>>> Sent: Monday, September 19, 2005 11:22 AM
>>>>> To: Windows File Systems Devs Interest List
>>>>> Subject: Re:[ntfsd] filter driver about encryption/descryption problem
>>>>> to change file size
>>>>>
>>>>> OSR has a file systems class in Los Angeles on the 24th of October.
>>>>> This
>>>>> problem you found is one of the more interesting to solve. Read about
>>>>> all
>>>>> parts of the read and write IRPs. Learn how a file’s size is
>>>>> increased.
>>>>>
>>>>> Write a test program that extends a file and use filespy and sfilter
>>>>> to
>>>>> see
>>>>> what happens. Get to a grease board and diagram what happens and how
>>>>> you
>>>>> might fit your problem into what you see and find a solution. Both
>>>>> trailers
>>>>> and headers have problems your driver must handle.
>>>>>
>>>>> “Bin Zeng” wrote in message
>>>>> news:xxxxx@ntfsd…
>>>>>> Anyone can give me a hint?
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thanks
>>>>>>
>>>>>>
>>>>>>
>>>>>> ________________________________
>>>>>>
>>>>>> From: xxxxx@lists.osr.com
>>>>>> [mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
>>>>>> Sent: Friday, September 16, 2005 11:03 AM
>>>>>> To: Windows File Systems Devs Interest List
>>>>>> Subject: Re:[ntfsd] filter driver about encryption/descryption
>>>>>> problem
>>>>> to
>>>>>> change file size
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Hi, ALL
>>>>>>
>>>>>>
>>>>>>
>>>>>> I am developing an encryption/decryption filter driver. In the
>>>>>> IRQ_MJ_WRITE routine, I need to encrypt
>>>>>>
>>>>>> The file and add some information to the tail of the file, it will
>>>>>> increase the size of the file. When I do that
>>>>>>
>>>>>> As following, it doesn$B!G(Bt work,the size still is the same.
>>>>> Anyone can help
>>>>>> me?
>>>>>>
>>>>>>
>>>>>>
>>>>>> 1$B!“(BAllocate new length buffer for
>>>>> Irp->AssociatedIrp.SystemBuffer$B!((B
>>>>>> 2$B!”(Bchanged IrpSp->Parameters.Write.Length to new
>>>>> length$B!((B
>>>>>> 3$B!"(Bchanged Irp->IoStatus.Information to new length$B!((B
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thanks
>>>>>>
>>>>>>
>>>>>>
>>>>>> Regards
>>>>>>
>>>>>>
>>>>>>
>>>>>> Bin
>>>>>>
>>>>>>
>>>>>> —
>>>>>> Questions? First check the IFS FAQ at
>>>>>> https://www.osronline.com/article.cfm?id=17
>>>>>>
>>>>>> You are currently subscribed to ntfsd as: xxxxx@evertrust.com
>>>>>> To unsubscribe send a blank email to xxxxx@lists.osr.com
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>>
>>>>> —
>>>>> Questions? First check the IFS FAQ at
>>>>> https://www.osronline.com/article.cfm?id=17
>>>>>
>>>>> You are currently subscribed to ntfsd as: xxxxx@evertrust.com
>>>>> To unsubscribe send a blank email to xxxxx@lists.osr.com
>>>>>
>>>>> —
>>>>> Questions? First check the IFS FAQ at
>>>>> https://www.osronline.com/article.cfm?id=17
>>>>>
>>>>> You are currently subscribed to ntfsd as: unknown lmsubst tag
>>>>> argument:
>>>>> ‘’
>>>>> To unsubscribe send a blank email to xxxxx@lists.osr.com
>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>>
>>>
>>>
>>>
>>
>>
>>
>
>
>

Many years ago we did a code review for AETI, a company based in Canada.
The review was about 30 pages long and at the end we told them that what
they had was a pile of worthless junk, unfit for use in a commercial
product. One reason I can mention them is because the results of our
review with them were apparently so horrible they promptly went out of
business and failed to pay their bill to us for our services.

Bottom line: there is a lot of junk out there, and yet there are a lot
of customers for whom the only metric of interest is cost, without any
regard to quality. My experience over the years (not limited just to
programming) is that it is ultimately the cost of maintenance that
predominates, so I’d rather purchase a quality product up-front, knowing
that it will provide many years of trouble-free service.

Fortunately, file systems are one of those common areas in which people
are not particularly concerned about the quality of the solutions.
After all, nobody really cares if their data gets lost do they? (Note:
this last comment is an example of sarcasm, for those who are not as
familiar with English.)

Regards,

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

Looking forward to seeing you at the next OSR File Systems class in Los
Angeles, CA October 24-27, 2005.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Don Burn
Sent: Tuesday, September 20, 2005 8:13 AM
To: ntfsd redirect
Subject: Re:[ntfsd] filter driver about encryption/descryption problem
to change file size

I don’t know if the ultimate customer is still in business, the US
consulting firm that produced the crap still is in business, claiming to
be
experts in Windows drivers (and a lot of other things). The driver in
question, for any operation to file system did multiple ZwOpen’s,
ZwWriteFile’s and ZwCloses with some special code to handle recursion,
that
did more painful operations!

Things were slow enough for me, that I offerred them a good discount, on
a
fixed price, with my standard 1 year warranty, no dice. Turn’s out the
original customer had spec’d 10K for the whole thing, and as a
consulting
firm they need over 50% overhead.


Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Remove StopSpam from the email to reply

“David J. Craig” wrote in message
news:xxxxx@ntfsd…
>I want that driver. It would be the perfect example and should be
saved
>for posterity. I sure hope you know the authors’ names as they should
be
>memorialized for all history. It reminds me of a story I heard one
time
>about cards and tapes. Read one card and update the tape copying it
from
>beginning to end, then requesting a new tape to do the next card. I
sure
>wish I could remember for certain who told me about that, but I am
pretty
>sure that he didn’t say who the author was. That might be worse than
your
>example, but I am certain it was told to me in the 1970’s.
>
> Are those US firms still in business? I hope not. Maybe they are
doing
> these commercials that I see for a lawyer to settle your tax debt with
the
> IRS for $20. Maybe used cars.
>
> “Don Burn” wrote in message news:xxxxx@ntfsd…
>> Actually, they were US firms, and the number was 2! In one case, I
ran
>> Iometer on their filter (it supposedly worked, but was missing some
>> functionality), it slowed down by 3 orders of magnitude (yep 1/1000th
of
>> the performance without the filter). The customer felt this should
be
>> fixable for a few hundred dollars, with the rest to cover the
>> enhancements.
>>
>> No wonder Walter Oney is going back to being a lawyer.
>>
>>
>> –
>> Don Burn (MVP, Windows DDK)
>> Windows 2k/XP/2k3 Filesystem and Driver Consulting
>> Remove StopSpam from the email to reply
>>
>>
>>
>> “David J. Craig” wrote in message
>> news:xxxxx@ntfsd…
>>>I am sure you would do it for a ‘few’ thousand - 50 to 80 maybe. In
the
>>>U.S. that would be a ‘few’, but I bet they were thinking of 3 to 5 at

>>>most. Did you go and destroy their dream world? That is so ‘not
nice’ of
>>>you. I guess for an effective encryption file systems filter, it
would
>>>cost more since you may have to buy the RSA toolkit for them with,
IIRC,
>>>a $50,000 starting price. It was so nice when I had those type of
>>>resources available, such as when I worked for Addison Fischer, a
>>>cryptographer. I can implement the code, but I sure don’t even want
to
>>>try doing it all by myself. You need others to validate your work,
>>>especially random number calls for session/symmetric keys. If you
>>>restrain the range and period of those numbers, you have only an
>>>appearance of protection.
>>>
>>> I wonder how long it will be before AMD and Intel start producing
quad
>>> core CPUs. That and enough memory and brute force attacks on crypto

>>> become available to the masses or a big part of them. I wondered
why
>>> someone doesn’t make a cpu with registers in the 8,192 bit size.
That
>>> should allow attacks on the factors that make up a lot of encryption

>>> algorithms today. If you can afford tens of millions of transistors
on a
>>> single die in a dual core cpu, why not just start making really big
>>> registers? Very few sales, but it could be done.
>>>
>>> Paranoid, tired, and talkative today I guess. But, just because I’m

>>> paranoid, it doesn’t mean that the whole world is not out to get me,
my
>>> money, or something.
>>>
>>> “Don Burn” wrote in message news:xxxxx@ntfsd…
>>>> David,
>>>>
>>>> You tried, the problem is that they will go off without this and

>>>> write CRAP. Worse yet they will set the expectations of what a
filter
>>>> will cost so low, that when the customer gets it and see problems
they
>>>> will think it should be fixable for a few $$$.
>>>>
>>>> The last three companies that have approached me for file
system
>>>> work, all had filters written by people who did not take the class,
or
>>>> spend the time to learn. All three were at best TOXIX WASTE, and
the
>>>> customer thought that it was fixable for a few thousand! When I
>>>> explained that the best thing they could do is destroy all copies
and
>>>> start over, they went of and found another contractor like the
idiot
>>>> who wrote it in the first place.
>>>>
>>>>
>>>> –
>>>> Don Burn (MVP, Windows DDK)
>>>> Windows 2k/XP/2k3 Filesystem and Driver Consulting
>>>> Remove StopSpam from the email to reply
>>>>
>>>>
>>>>
>>>> “David J. Craig” wrote in message
>>>> news:xxxxx@ntfsd…
>>>>>I plugged it, but maybe it has something to do with the story about
the
>>>>>horse and water. If someone wants to write file systems or file
>>>>>systems filters, the class is the only one I know about and it is
>>>>>necessary. Maybe a PlugFest could substitute if someone was an
expert
>>>>>in storage drivers and a few other legacy drivers. The filter
manager
>>>>>may reduce the requirement, but from the questions I see, active
>>>>>filters are still a bear to implement with encryption being one of
the
>>>>>most difficult.
>>>>>
>>>>> “Tony Mason” wrote in message news:xxxxx@ntfsd…
>>>>> The class is actually open to residents of any country, not just
the
>>>>> USA
>>>>> - in fact I’ve had west-coast based classes where every single
person
>>>>> attending was from outside the US.
>>>>>
>>>>> Tony Mason
>>>>> Consulting Partner
>>>>> OSR Open Systems Resources, Inc.
>>>>> http://www.osr.com
>>>>>
>>>>>
>>>>> Looking forward to seeing you at the next OSR File Systems class
in
>>>>> Los
>>>>> Angeles, CA October 24-27, 2005.
>>>>>
>>>>>
>>>>> -----Original Message-----
>>>>> From: xxxxx@lists.osr.com
>>>>> [mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
>>>>> Sent: Monday, September 19, 2005 11:32 AM
>>>>> To: ntfsd redirect
>>>>> Subject: RE: [ntfsd] filter driver about encryption/descryption
>>>>> problem
>>>>> to change file size
>>>>>
>>>>> Thanks,David. Unfortunately I am not in USA, I can’t join that
class.
>>>>>
>>>>> Bin
>>>>>
>>>>> -----Original Message-----
>>>>> From: xxxxx@lists.osr.com
>>>>> [mailto:xxxxx@lists.osr.com] On Behalf Of David J.
Craig
>>>>> Sent: Monday, September 19, 2005 11:22 AM
>>>>> To: Windows File Systems Devs Interest List
>>>>> Subject: Re:[ntfsd] filter driver about encryption/descryption
problem
>>>>> to change file size
>>>>>
>>>>> OSR has a file systems class in Los Angeles on the 24th of
October.
>>>>> This
>>>>> problem you found is one of the more interesting to solve. Read
about
>>>>> all
>>>>> parts of the read and write IRPs. Learn how a file’s size is
>>>>> increased.
>>>>>
>>>>> Write a test program that extends a file and use filespy and
sfilter
>>>>> to
>>>>> see
>>>>> what happens. Get to a grease board and diagram what happens and
how
>>>>> you
>>>>> might fit your problem into what you see and find a solution.
Both
>>>>> trailers
>>>>> and headers have problems your driver must handle.
>>>>>
>>>>> “Bin Zeng” wrote in message
>>>>> news:xxxxx@ntfsd…
>>>>>> Anyone can give me a hint?
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thanks
>>>>>>
>>>>>>
>>>>>>
>>>>>> ________________________________
>>>>>>
>>>>>> From: xxxxx@lists.osr.com
>>>>>> [mailto:xxxxx@lists.osr.com] On Behalf Of Bin Zeng
>>>>>> Sent: Friday, September 16, 2005 11:03 AM
>>>>>> To: Windows File Systems Devs Interest List
>>>>>> Subject: Re:[ntfsd] filter driver about encryption/descryption
>>>>>> problem
>>>>> to
>>>>>> change file size
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Hi, ALL
>>>>>>
>>>>>>
>>>>>>
>>>>>> I am developing an encryption/decryption filter driver. In the
>>>>>> IRQ_MJ_WRITE routine, I need to encrypt
>>>>>>
>>>>>> The file and add some information to the tail of the file, it
will
>>>>>> increase the size of the file. When I do that
>>>>>>
>>>>>> As following, it doesn$B!G(Bt work,the size still is the same.
>>>>> Anyone can help
>>>>>> me?
>>>>>>
>>>>>>
>>>>>>
>>>>>> 1$B!“(BAllocate new length buffer for
>>>>> Irp->AssociatedIrp.SystemBuffer$B!((B
>>>>>> 2$B!”(Bchanged IrpSp->Parameters.Write.Length to new
>>>>> length$B!((B
>>>>>> 3$B!"(Bchanged Irp->IoStatus.Information to new length$B!((B
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thanks
>>>>>>
>>>>>>
>>>>>>
>>>>>> Regards
>>>>>>
>>>>>>
>>>>>>
>>>>>> Bin
>>>>>>
>>>>>>
>>>>>> —
>>>>>> Questions? First check the IFS FAQ at
>>>>>> https://www.osronline.com/article.cfm?id=17
>>>>>>
>>>>>> You are currently subscribed to ntfsd as: xxxxx@evertrust.com
>>>>>> To unsubscribe send a blank email to xxxxx@lists.osr.com
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>>
>>>>> —
>>>>> Questions? First check the IFS FAQ at
>>>>> https://www.osronline.com/article.cfm?id=17
>>>>>
>>>>> You are currently subscribed to ntfsd as: xxxxx@evertrust.com
>>>>> To unsubscribe send a blank email to xxxxx@lists.osr.com
>>>>>
>>>>> —
>>>>> Questions? First check the IFS FAQ at
>>>>> https://www.osronline.com/article.cfm?id=17
>>>>>
>>>>> You are currently subscribed to ntfsd as: unknown lmsubst tag
>>>>> argument:
>>>>> ‘’
>>>>> To unsubscribe send a blank email to xxxxx@lists.osr.com
>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>>
>>>
>>>
>>>
>>
>>
>>
>
>
>


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

> Bottom line: there is a lot of junk out there, and yet there are a lot

of customers for whom the only metric of interest is cost, without any
regard to quality.

I have also experiences that customers for the project often
VEEERYYYY underestimate complexity of the FSD drivers and
FS filters. I have met a requirement from a customer that he wanted
to build a new file system only because they wanted to encrypt
the CD serial number and wanted the CD to be unreadable
to normal application.

I told them “Why you don’t create a single encrypted file,
which could be encrypted by a simple library, why you want
to create a file system for it ?”
“Or why you don’t encrypte the files off-line and just write
a library that will provide files reading and writing in user mode,
if all allications reading from that CD is yourself-made ?”

The answer was “no way, it already works that we and we don’t
want to change this, because out authentication server requires it”

They apparently didn’t realize that development of such file system
will take long time and will in result cost much more than a single
change in usermode software, even if it must be in both client and server.

L.