ecryptfs-stat support for encrypted filenames

Bug Description

We need to modernize the ecryptfs-stat tool to handle some recent ecryptfs enhancements, such as encrypted filenames.

When developing, debugging, and recovering ecryptfs data, it would be useful to use ecryptfs-stat to parse ecryptfs encrypted files.

:-Dustin

This is the current output:
---
tyhicks@gentoo-virt /mnt/.ecryptfs-ext3 $ ecryptfs-stat ECRYPTFS_FNEK_ENCRYPTED.FWZzc4x9NjnS-UTsAK4mvaKSOBy.0pFk10nagE4Fnw8pg4-DKT2YKBm8Sk--
File version: [3]
Decrypted file size: [125]
Number of header bytes at front of file: [8192]
Metadata in the header region
Encrypted
HMAC disabled
---

It would be nice to also know things like how many encrypted FEKs are in the header, what the signatures are of the FEKEKs used, the signature of the FNEK, etc.

On Fri, Mar 13, 2009 at 3:07 PM, Tyler Hicks <email address hidden> wrote:
> This is the current output:
> ---
> tyhicks@gentoo-virt /mnt/.ecryptfs-ext3 $ ecryptfs-stat ECRYPTFS_FNEK_ENCRYPTED.FWZzc4x9NjnS-UTsAK4mvaKSOBy.0pFk10nagE4Fnw8pg4-DKT2YKBm8Sk--
> File version: [3]
> Decrypted file size: [125]
> Number of header bytes at front of file: [8192]
> Metadata in the header region
> Encrypted
> HMAC disabled
> ---
>
> It would be nice to also know things like how many encrypted FEKs are in
> the header, what the signatures are of the FEKEKs used, the signature of
> the FNEK, etc.

Right, and it would be nice to be able to have a byte-by-byte accounting
of the contents, i.e.
1-128: header
129-255: FNEK_ENCRYPTED
256-258: file version (3)
[...]
X-Y: FEK_ENCRYPTED_WITH_FNEK
Y-Z: FEK_ROT13d

:)

I'm going to assign to Serge for now, as he mentioned some interest in solving this one ;-)

:-Dustin

Reassigning to myself. Serge, you're more than welcome to help. :)

No need for me to be assigned to wishlisted bug

Hi Dustin Kirkland,
CC Tyler Hicks,

I execute ecryptfs-stat to display some information of eCryptfs encrypted file and it says as Tyler commented eight years ago. It doesn't make any change, I think. I'm going to assign to me because I have plenty of time and have strong interests in eCryptfs.

Thus, I'm going to add 1) what kind of way it encrypted (symmetric/asymmetric encryption), 2) what the signature of FEKEK is, 3) what the signature of FNEK is if user enables filename encryption. What else could be added in ecryptfs-stat and do no harm to eCryptfs security.

Any suggestions and comments are welcome :-)

Jason