Dirlock: a new tool to manage encrypted filesystems

https://media.ccc.de/v/all-systems-go... In the Linux world there are several tools and technologies to encrypt data on a hard drive, most falling into one of two categories: block device encryption (like LUKS) or stacked filesystem encryption (like EncFs or gocryptfs). This presentation will introduce Dirlock, a new tool that belongs to a third category: native filesystem encryption, using the kernel's fscrypt API. Dirlock is currently being developed and its aim is to provide a flexible way to encrypt files, suitable for both user accounts and arbitrary directories, with full PAM integration, support for hardware-backed mechanisms such as FIDO2 or TPM and with a D-Bus API for easy management. Alberto Garcia https://cfp.all-systems-go.io/all-sys... #asg2025 Licensed to the public under https://creativecommons.org/licenses/...