论文翻译：Inside Encrypting File System（加密文件系统）.doc

专业论文翻译 论文课题：Inside?Encrypting?File?System 指 导 教 师： 班 级: 姓 名: Inside?Encrypting?File?System The?next?step?EfsRpcEncryptFileSrv?performs?is?to?create?a?log?file? into?which?LSASRV?will?Record?the?progress?of?the?encryption?process.EfsRpcEncryptFileSrv?creates?the?log?file?on?the?same?drive?as?the? file?that?EFS?will?encrypt,?and?places?the?log?file?under?the?root directorys?subdirectory?System?Volume?Information.?The?log?file? usually?has?the?name?efs0.log,?but?if?other files?are?undergoing? encryption,?EfsRpcEncryptFileSrv?replaces?the?number?0 with? increasing?numbers?until?LSASRV?can?create?a?unique?log?file?for?the?current?encryption.Win2Ks?cryptography?APIs?rely?on?information?that?a?users?Registry?profile?stores,?so EfsRpcEncryptFileSrv? next?uses?the?LoadUserProfile?API?of?userenv.dll?(User?Environment? DLL)?to?load?the?profile?into?the?Registry?of?the?user? EfsRpcEncryptFileSrv?is?impersonating.?Usually?the?user?profile?is? already?loaded,?because?winlogon.exe?loads?a?users?profile?when?a? user?interactively?logs?on.?However,?if?you?use?the?Microsoft? Windows?NT?Server?4.0?Resource?Kit?Su?utility?or?the?Win2K?RunAs? command?to?log?on?to?a?different?account,?when?you?try?to?access? encrypted?files?from?that?account,?the?accounts?profile?might?not? load.EfsRpcEncryptFileSrvs?next?step?is?to?call?another?LSASRV? function,?EncryptFileSrv,?to?carry?out?the?rest?of?the?encryption? process?for?the?file.?EncryptFileSrv?begins?by?querying?NTFS?about? which?data?streams?exist?within?the?file,?noting?the?result?for?lateruse.?NTFS?supports?alternate?named?data?streams?in?addition?to?the? default?unnamed?stream?in?which?NT?typically?storesdata.?Win2K?makes?heavy?use?of?alternate?streams?to?support?compound?document?storage? (i.e.,?Native?Structured?Storage),?as?does?Services?for?Macintosh? which?uses?alternate?streams?to?implement?Macintosh?resource?forks.? EFS?must?encrypt?all?of?a?files?data?stre