Separating key management from file system security

Proceedings of the 17th ACM Symposium on Operating Systems Principles, SOSP 1999

Volumn , Issue , 1999, Pages 124-139

  Mazières, David ^a   Kaminsky, Michael ^a   Kaashoek, M Frans ^a   Witchel, Emmett ^a  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AUTHENTICATION; CRYPTOGRAPHY;

ENCRYPTION KEY; EXISTING SYSTEMS; FILE SYSTEM SECURITIES; INTERNAL KEYS; KEY MANAGEMENT; KEY MANAGEMENT MECHANISM; KEY MANAGEMENT SCHEMES; SECURE NETWORKS;

FILE ORGANIZATION;

EID: 84978429558     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/319151.319160     Document Type: Conference Paper

References (34)

1. Mihir Bellare and Phillip Rogaway. Random oracles are practical: A paradigm for designing efficient protocols. In Proceedings of the First ACM Conference on Computer and Communications Security, pages 62-73, Fairfax, VA, 1993.
2. Mihir Bellare and Phillip Rogaway. Optimal asymmetric encryption-how to encrypt with RSA. In A. De Santis, editor, Advances in Cryptology-Eurocrypt 1994, volume 950 of Lecture Notes in Computer Science, pages 92-111. Springer-Verlag, 1995.
3. Mihir Bellare and Phillip Rogaway. The exact security of digital signatures-how to sign with RSA and Rabin. In U. Maurer, editor, Advances in Cryptology-Eurocrypt 1996, volume 1070 of Lecture Notes in Computer Science, pages 399-416. Springer-Verlag, 1996.
4. Andrew D. Birrell, Andy Hisgen, Chuck Jerian, Timothy Mann, and Garret Swart. The Echo distributed file system. Technical Report 111, Digital Systems Research Center, Palo Alto, CA, September 1993.
5. Andrew D. Birrell, Butler W. Lampson, Roger M. Needham, and Michael D. Schroeder. A global authentication service without global trust. In Proceedings of the 1986 IEEE Symposium on Security and Privacy, pages 223-230, Oakland, CA, 1986.
6. B. Callaghan, B. Pawlowski, and P. Staubach. NFS version 3 protocol specification. RFC 1831, Network Working Group, June 1995.
7. Carl M. Ellison, Bill Frantz, Butler Lampson, Ron Rivest, Brian M. Thomas, and Tatu Ylönen. SPKI certificate documentation. Work in progress, from http://www.clark.net/pub/cme/html/spki.html.
8. FIPS 180-1. Secure Hash Standard. U.S. Department of Commerce/N.I.S.T., National Technical Information Service, Springfield, VA, April 1995.
9. FTPS 186. Digital Signature Standard. U.S. Department of Commerce/N.I.S.T, National Technical Information Service, Springfield, VA, 1994.
10. Alan O. Freier, Philip Karlton, and Paul C. Kocher. The SSL protocol version 3.0. Internet draft (draft-freier-ssl-version3-02.txt), Network Working Group, November 1996. Work in progress.
11. John S. Heidemann and Gerald J. Popek. File system development with stackable layers. ACM Transactions on Computer Systems, 12(1):58-89, February 1994.
12. John H. Howard, Michael L. Kazar, Sherri G. Menées, David A. Nichols, M. Satyanarayanan, Robert N. Side-botham, and Michael J. West. Scale and performance in a distributed file system. ACM Transactions on Computer Systems, 6(1):51-81, February 1988.
13. Kalle Kaukonen and Rodney Thayer. A stream cipher encryption algorithm "arcfour". Internet draft (draft-kaukonen-cipher-arcfour-03), Network Working Group, July 1999. Work in progress.
14. Michael L. Kazar, Bruce W. Leverett, Owen T. Anderson, Vasilis Apostolides, Beth A. Bottos, Sailesh Chutani, Craig F. Everhart, W. Anthony Mason, Shu-Tsui Tu, and Edward R. Zayas. DEcorum file system architectural overview. In Proceedings of the Summer 1990 USENIX, pages 151-163, Anaheim, CA, 1990. USENIX.
15. S. Kent and R. Atkinson. Security architecture for die internet protocol. RFC 2401, Network Working Group, November 1998.
16. Butler Lampson, Martin Abadi, Michael Burrows, and Edward P. Wobber. Authentication in distributed systems: Theory and practice. ACM Transactions on Computer Systems, 10(4):265-310, 1992.
17. Timothy Mann, Andrew D. Birrell, Andy Hisgen, Chuck Jerian, and Garret Swart. A coherent distributed file cache with directory write-behind. ACM Transactions on Computer Systems, 12(2):123-164, May 1994.
18. John K. Ousterhout. Why aren't operating systems getting faster as fast as hardware? In Summer USENIX '90, pages 247-256, Anaheim, CA, June 1990.
19. Niels Provos and David Mazières. A future-adaptable password scheme. In Proceedings of the 1999 USENIX, Freenix track (the on-line version), Monterey, CA, June 1999. USENIX. from http://www.usenix.org/eveiits/usenix99/provos.html.
20. Peter Reiher, Jr. Thomas Page, Gerald J. Popek, Jeff Cook, and Stephen Crocker. Truffles - a secure service for widespread file sharing. In Proceedings of the PSRG Workshop on Network and Distributed System Security, pages 101-119, San Diego, CA, 1993.
21. Ronald L. Rivest and Butler Lampson. SDSI-a simple distributed security infrastructure. Working document from http://theory.les.mit.edu/~cis/sdsi.html.
22. M. Rosenblum and J. Ousterhout. The design and implementation of a log-structured file system. In Proceedings of the 13th ACM Symposium on Operating Systems Principles, pages 1-15, Pacific Grove, CA, October 1991. ACM.
23. Russel Sandberg, David Goldberg, Steve Kleiman, Dan Walsh, and Bob Lyon. Design and implementation of the Sun network filesystem. In Proceedings of the Summer 1985 USENIX, pages 119-130, Portland, OR, 1985. USENIX.
24. M. Satyanarayanan. Integrating security in a large distributed system. ACM Transactions on Computer Systems, 7(3):247-280, 1989.
25. M. Satyanarayanan. Scalable, secure and highly available file access in a distributed workstation environment. IEEE Computer, pages 9-21, May 1990.
26. Bruce Schneier. Description of a new variable-length key, 64-bit block cipher (blowfish). In Fast Software Encryption, Cambridge Security Workshop Proceedings, pages 191-204. Springer-Verlag, December 1993.
27. R. Srinivasan. RPC: Remote procedure call protocol specification version 2. RFC 1831, Network Working Group, August 1995.
28. R. Srinivasan. XDR: External data representation standard. RFC 1832, Network Working Group, August 1995.
29. J. G. Steiner, B. C. Neuman, and J. I. Schiller. Kerberos: An authentication service for open network systems. In Proceedings of the Winter 1988 USENIX, pages 191-202, Dallas, TX, February 1988. USENIX.
30. Amin Vahdat. Operating System Services for Wide-Area Applications. PhD thesis, Department of Computer Science, University of California, Berkeley, December 1998.
31. Hugh C. Williams. A modification of the RSA public-key encryption procedure. IEEE Transactions on Information Theory, IT-26(6):726-729, November 1980.
32. Edward P. Wobber, Martin Abadi, Michael Burrows, and Butler Lampson. Authentication in the Taos operating system. ACM Transactions on Computer Systems, 12(1):3-32, 1994.
33. Thomas Wu. The secure remote password protocol. In Proceedings of the 1998 Internet Society Network and Distributed System Security Symposium, pages 97-111, San Diego, CA, March 1998.
34. Tatu Ylönen. SSH - secure login connections over the Internet. In Proceedings of the 6th USENIX Security Symposium, pages 37-42, San Jose, CA, July 1996.