David Mazières Michael Kaminsky M. Frans Kaashoek Emmett Witchel Separating key management from file system security. 124-139 1999 SOSP http://doi.acm.org/10.1145/319151.319160 db/conf/sosp/sosp99.html#MazieresKKW99