Authenticated and Encrypted Storage on Embedded Linux
Explore authenticated and encrypted storage solutions for embedded Linux systems in this 34-minute conference talk. Gain insights into various kernel-provided building blocks, including dm-crypt, dm-verity, dm-integrity, fscrypt, ecryptfs, IMA/EMV, fsverity, and UBIFS authentication. Understand the trade-offs and limitations of cryptographic tools to select the most appropriate combination for your project. Discover how storage design impacts performance, security, and development ease, and learn to make informed decisions early in the project lifecycle. Delve into mature and recently implemented mechanisms, focusing on their suitability for specific embedded use cases. Cover topics such as the Linux storage stack, transparent authentication and encryption, crypto refresher, master key storage, recovery options, and field return mode. Receive practical recommendations to optimize your embedded Linux storage implementation.