File encryption with dm-crypt
What are the benefits of using TCFS over CFS? Which is preferable?

    Requires Free Membership to View

    When you register, my team of editors will also send you resources covering Linux administration and management; integration and interoperability between Linux, Windows and Unix; securing Linux and mixed-platform environments; and migrating to Linux.

    Margie Semilof, Editorial Director

    By submitting your registration information to SearchEnterpriseLinux.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchEnterpriseLinux.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

First and foremost, information on encrypted file systems and their relative merits and support is few and far between. It is a complicated topic and discussions about benefits of one over another can be convoluted and confusing.

TCFS and CFS are both encrypted file systems based on the NFS interface. TCFS is enabled as a kernel module and CFS is enabled at user level. My experience with CFS is that it can be very slow, but I can only speak to its use on Linux platforms, not BSD or Solaris. Unfortunately, I have not used TCFS so I can't provide a comparison between the two.

My personal preference for an encrypted file system is dm-crypt. It is a secure and modern solution that is well integrated into the Linux 2.6 kernel.

This was first published in November 2006