I'm a newbie to encryption issues and I'm trying to sort out a few questions.
For a distributed application we need to deploy a server outside of our company with sensitives PDF files on it. That because those files need to be accessed through another system (tablets fleet), and the huge amount of those files discard the accessing through the network from our servers.
I've been digging into dm-crypt/LUKS solution which seems to answer my problems, though I've a few questions:
- Will a java app, deployed through tomcat, be able to seamlessly access those files ? My guess is yes if I start tomcat with sudo, but again, newbie...
- Can I consider mounting the volume through the webapp ? I'm considering retrieving the password to the encrypted partition through a web service and store the password on one of our servers.
- How bad is the overhead to decrypting those files on the fly? The
encrypted data will be accessed by a simultaneously by 4-5 users
retrieving around 50MB (decrypted size) of data.
Thx in advance for your help