Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #204368

Re: Looking for advice on tools (or libraries) for unsupervised, bulk symmetric encryption/decryption of files

From John Crawley <john@bunsenlabs.org>
Newsgroups linux.debian.user
Subject Re: Looking for advice on tools (or libraries) for unsupervised, bulk symmetric encryption/decryption of files
Date 2019-01-13 10:00 +0100
Message-ID <xfJMC-4vq-9@gated-at.bofh.it> (permalink)
References <xemIp-3aB-15@gated-at.bofh.it> <xez2V-2md-1@gated-at.bofh.it> <xfcQF-1e2-1@gated-at.bofh.it> <xfEWB-1Cu-3@gated-at.bofh.it>
Organization BunsenLabs

Show all headers | View raw


On 13/01/2019 12.46, Celejar wrote:
> On Fri, 11 Jan 2019 21:45:57 +0000
>>> I believe that the most commonly used software for file level
>>> encryption is EncFS. I haven't really used it much, and can't speak to
>>> its long term stablity.
>>
>> EncFS should not be used for any new file encryption project, IMHO.
>> There was the following report in 2014:
>> https://defuse.ca/audits/encfs.htm
>> This is referenced in the NEWS file in the EncFS package
>> https://salsa.debian.org/debian/encfs/blob/debian/sid/debian/NEWS
>>
>> Both the report and the NEWS file are 5 years sold so I am not sure of
>> its current status but I'd want to seek positive assurance.
> 
> Huh - good to know. But I was wondering, along similar (but less
> informed) lines, how good some of the other suggestions were, e.g.
> ccrypt. I know very little about ccrypt, but has it even been
> audited at all? Is it sufficiently widely used that any vulnerablities
> or misimplementations of the sort discovered by the EncFS audit would
> have been looked for or turned up?

Looking at encfs, gocryptfs showed up, which claims "This project was  
inspired by EncFS and strives to fix its security issues while providing  
good performance":
https://packages.debian.org/stretch/gocryptfs
https://github.com/rfjakob/gocryptfs

No personal experience (yet) of using it though.
-- 
John

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Looking for advice on tools (or libraries) for unsupervised, bulk  symmetric encryption/decryption of files Kynn Jones <kynnjo@gmail.com> - 2019-01-09 15:10 +0100
  Re: Looking for advice on tools (or libraries) for unsupervised, bulk  symmetric encryption/decryption of files David Christensen <dpchrist@holgerdanske.com> - 2019-01-09 20:00 +0100
  Re: Looking for advice on tools (or libraries) for unsupervised,          bulk symmetric encryption/decryption of files Linux-Fan <Ma_Sys.ma@web.de> - 2019-01-10 00:50 +0100
  Re: Looking for advice on tools (or libraries) for unsupervised,  bulk symmetric encryption/decryption of files Celejar <celejar@gmail.com> - 2019-01-10 04:20 +0100
    Re: Looking for advice on tools (or libraries) for unsupervised,  bulk symmetric encryption/decryption of files Jonathan Dowland <jmtd@debian.org> - 2019-01-11 22:50 +0100
      Re: Looking for advice on tools (or libraries) for unsupervised,  bulk symmetric encryption/decryption of files Celejar <celejar@gmail.com> - 2019-01-13 04:50 +0100
        Re: Looking for advice on tools (or libraries) for unsupervised, bulk  symmetric encryption/decryption of files John Crawley <john@bunsenlabs.org> - 2019-01-13 10:00 +0100
  Re: Looking for advice on tools (or libraries) for unsupervised, bulk  symmetric encryption/decryption of files Ben Caradoc-Davies <ben@transient.nz> - 2019-01-10 06:10 +0100

csiph-web