Cryptography in Linux

1
Cryptography in Linux
Kalyan Varma Alluri
2
Disclaimer

• Crypto..
• Does not solve your security problem
• Gives you false sense of security
• Makes the stronger link stronger
• Is typically bypassed and not penetrated

3
Where to apply Crypto ?
Application / Program
Interface ( IO )
Data Storage
Network
4
Securing Storage

• Kernel crypto API ( formally known as
  International kernel patch)
• Mountable crypto file system
• Losetup
• Also check out CFS

5
Securing network

• IP Sec
• Freeswan for 2.2/2.4
• 2.6 has native kernel ipsec support from USAGI
  ipv6 group
• uses routing table style key table. ( called key
  index)
• SSL
• Mod_ssl

6
Securing Application

• How do you handle sensitive data ?
• How to you store sensitive data ?
• How do you transmit data ?

7
OpenSSL

• Command line interface
• Generating Certs
• RSA keys
• Self signed certs
• API
• Encrypting/decrypting data
• Hashing, MAC

8
OpenSSL Programming
CA, Session keys, Cache
Context Object
SSL connections/ IO
9
More coming here soon