Security Features for UBIFS

on YouTube ↗32m

" summary

UBIFS has added the fscrypt interface to enable file-content encryption on raw flash using UBI/UBIFS. The talk explains which parts of the MTD/UBI/UBIFS stack are protected versus not protected, shows how file encryption combined with authenticated metadata can form a chain of trust on embedded devices, and covers master-key support, policy integration, and the expected runtime/memory overheads and practical limits for low-power, low-RAM systems.

AI-written summary · about

" chapters (8)

1. 0:00UBIFS security features
2. 3:00Memory pressure in UBIFS
3. 7:09New UBIFS framework features
4. 13:11Open directory controls
5. 18:45UBIFS case studies
6. 25:15UBIFS management architecture
7. 30:04UBIFS index trees
8. 31:53Final insights & Q&A

" related talks

• 53mSecure Embedded Linux Product - A Success StoryMartin Bis · Embedded Linux Conference Europe 2013
• 34mAuthenticated and Encrypted Storage on Embedded LinuxJan Lübbe · Open Source Summit Europe + Embedded Linux Conference Europe 2019
• 33mEncryption for filesystems with advanced features new fscrypt functionalitySweet Tea Dorminy · Linux Plumbers Conference 2023
• 51mTrusted Firmware M : Secure StorageAshutosh Singh · Linaro Connect Hong Kong 2018
• 33mBringing fscrypt Encryption to CephFS UserspaceChristopher Hoffman · Cephalocon 2024
• 45mNavigating Security Tradeoffs in Embedded Linux SystemsOlivier Benjamin · Open Source Summit Europe 2025
• 32mfs-verity: Native File-based AuthenticityMichael Halcrow, Eric Biggers · Linux Security Summit North America 2018
• 25mSecuring your next 96Boards design using Xilinx Zynq MPSoCKevin Keryk · Linaro Connect Bangkok 2019