of a ``virtual'' representation of the encrypted lower

Header Extent: Octets 0-7: Unencrypted file size (big-endian) Octets 8-15: eCryptfs special marker Octets 16-19: Flags Octet 16: File format version number (between 0 and 255) Octets 17-18: Reserved Octet 19: Bit 1 (lsb): Reserved Bit 2: Encrypted? Bits 3-8: Reserved Octets 20-23: Header extent size (big-endian) Octets 24-25: Number of header extents at front of file (big-endian) Octet 26: Begin RFC 2440 authentication token packet set ecryptfs_copy_up_encrypted_with_header

   file. The actual lower file does not have the metadata in
   the header. This is locked.

: The eCryptfs inode's cryptographic context

The ``view'' is the version of the file that userspace winds up seeing, with the header information inserted.