File systems that obscure or hide the data they contain and tools to analyze such file systems.
Author: Valient Gough / vgough at pobox com
EncFS provides an encrypted filesystem in user-space. The EncFS module itself runs without any special permissions and uses the FUSE library and Linux kernel module to provide the filesystem interface.
Author: David McNab / david at rebirthing co nz
PhoneBook is expressly designed for use in situations where someone can be under pressure (legal, military and/or criminal) to disclose decryption keys, and has a 'chaffing' scheme whereby the user can disclose only passphrases for non-sensitive material, and credibly deny the existence of anything else.
Author Christoph Hohmann (firstname.lastname@example.org)
CryptoFS is a encryption filesystem for Filesystem in Userspace (FUSE). Files written to the mount point will be stored encrypted (data and filename) in a directory on a normal filesystem.
Author: Dutch National Police Agency
LibCarvPath is a library for computer forensics carving tools. The library provides in the low level needs of zero-storage carving. It does this by providing an interface to hierarchically ordered fragment lists, and allowing these fragment lists to be converted to and from virtual file paths. These special virtual file paths can be used in conjunction with the CarvFS filesystem, a pseudo filesystem build using fuse and LibCarvPath.
Author: Rob J Meijer
MinorFs is a userspace filesystem (fuse) for Linux providing private storage to pseudo persistent processes. This allows programs that are run by a user to keep some data safe from all potential malware that runs with all this users privileges.
Author: Metin KAYA / metin at EnderUNIX.org
MetFS is a filesystem software in userspace that is encrypted, dynamic sized (increase when new data added, decrease when data removed), single file when it's unmounted and very fast. MetFS has been written in C language for performance reasons; proved to be running on Linux and FreeBSD.
Author: Vitaly "_Vi" Shukela <email@example.com>
chaoticfs is a special encrypting filesystem with a "false bottom": you can store multiple independent branches of the data. When in need, you can expose only few branches and it can't be determined using statistical methods whether there are more branches with data. The storage looks like a random data. Blocks are allocated randomly. No dates or sequential numbers are stored. You can update any branch without spoiling other ones. Everything is encrypted and randomized.