[prev in list] [next in list] [prev in thread] [next in thread] 

List:       best-of-security
Subject:    CFS 1.3.0 now available
From:       Julian Assange <proff () suburbia ! net>
Date:       1995-08-02 0:19:39
[Download RAW message or body]

Forwarded message:
>From owner-cfs-users@research.att.com Sun Jul 30 12:32:10 1995
Posted-Date: Fri, 28 Jul 1995 13:15:27 EDT
Message-Id: <9507281715.AA03749@merckx.info.att.com>
To: cfs-users@research.att.com
Subject: CFS 1.3.0 now available
Date: Fri, 28 Jul 1995 13:15:27 EDT
From: Matt Blaze <mab@research.att.com>
Reply-To: Matt Blaze <mab@research.att.com>

Patches are now available in the list archive for the new release of
CFS, version 1.3.0.

New features include:

* A new key material generation algorithm that uses a hash of the
supplied passphrase and some clock skew to generate the key bits.
Directory keys are stored in encrypted form along with the encrypted
directory; the new "cpasswd" program allows changing the passphrase.
Future versions of CFS allow users who share encrypted directories
to have their own private passphrases.

* Some bug fixes, although several bugs remain for some platforms.  In
particular, I have yet to deal with all of the Linux mess (there are just
too many versions out there, and I don't run any of them...) or the bug
(which I can't reproduce) that prevents rm -r of large directories on
some platforms.

* The "ESM" encrypting session manager is now included.  This allows
shell-to-shell encrypted sessions across insecure links and requires
no OS or network support.  It is useful for typing cfs passphrases
when logged in over the network.  Needs RSAREF to compile; tested only
on SunOS and BSDI.

I suggest that everyone upgrade.

A future version of cfs (probably in a few months) will support an expanded
key management scheme based on the new features in this release.

I have tested 1.3.0 only on BSDI and SunOS 4.1.3.  Several users tested
it on other platforms, but I can't promise anything.

To get patches that upgrade from the 1.2.1 release via email:
  echo get cfs-users cfs.1.3.0.patch | mail cfs-users-request@research.att.com

To get patches that upgrade from the 1.3.beta release via email:
  echo get cfs-users cfs.1.3.0.from.beta.patch | mail cfs-users-request@research.att.com

As always, if you can't deal with patches, let me know (at
cfs@research.att.com) and I'll send you a fresh distribution.  (You'll
need to include a statement that you're in the US or Canada and a citizen
and have read the license, etc.).  But PLEASE at least try to get the
patches first; I have to process requests for the full distribution
by hand.  Thanks.

-matt

[prev in list] [next in list] [prev in thread] [next in thread]