Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #226371 > unrolled thread

Encrypt files on Linux, decrypt on Windows

Back to article view | Back to linux.debian.user

Contents

  Encrypt files on Linux, decrypt on Windows local10 <local10@tutanota.com> - 2020-08-21 19:50 +0200
    Re: Encrypt files on Linux, decrypt on Windows john doe <johndoe65534@mail.com> - 2020-08-21 20:20 +0200
    Re: Encrypt files on Linux, decrypt on Windows Linux-Fan <Ma_Sys.ma@web.de> - 2020-08-21 20:30 +0200
      Re: Encrypt files on Linux, decrypt on Windows David Christensen <dpchrist@holgerdanske.com> - 2020-08-21 21:20 +0200
        Re: Encrypt files on Linux, decrypt on Windows john doe <johndoe65534@mail.com> - 2020-08-21 21:20 +0200
          Re: Encrypt files on Linux, decrypt on Windows Linux-Fan <Ma_Sys.ma@web.de> - 2020-08-21 22:00 +0200
      Re: Encrypt files on Linux, decrypt on Windows Teemu Likonen <tlikonen@iki.fi> - 2020-08-21 22:40 +0200
        [OT] Linux-Fan's bad signatures (Re: Encrypt files on Linux,          decrypt on Windows) Linux-Fan <Ma_Sys.ma@web.de> - 2020-08-22 00:20 +0200
          Re: Linux-Fan's bad signatures Teemu Likonen <tlikonen@iki.fi> - 2020-08-22 09:20 +0200
            Re: Linux-Fan's bad signatures Linux-Fan <Ma_Sys.ma@web.de> - 2020-08-22 12:50 +0200
          Signing emails, was Re: General-Purpose Server for Debian Stable David Wright <deblis@lionunicorn.co.uk> - 2020-10-02 05:30 +0200
    Re: Encrypt files on Linux, decrypt on Windows Paul Johnson <baloo@ursamundi.org> - 2020-08-21 20:40 +0200
      Re: Encrypt files on Linux, decrypt on Windows Charles Curley <charlescurley@charlescurley.com> - 2020-08-21 21:10 +0200
        Re: Encrypt files on Linux, decrypt on Windows Marek Mosiewicz <marek.mosiewicz@jotel.com.pl> - 2020-08-23 11:30 +0200
          Re: Encrypt files on Linux, decrypt on Windows <tomas@tuxteam.de> - 2020-08-23 11:40 +0200
        Re: Encrypt files on Linux, decrypt on Windows Andrei POPESCU <andreimpopescu@gmail.com> - 2020-08-23 13:10 +0200
          Re: Encrypt files on Linux, decrypt on Windows Charles Curley <charlescurley@charlescurley.com> - 2020-08-23 16:40 +0200
          Signal [Was:] Re: Encrypt files on Linux, decrypt on Windows Celejar <celejar@gmail.com> - 2020-08-25 20:20 +0200
            Re: Signal [Was:] Re: Encrypt files on Linux, decrypt on Windows Andrei POPESCU <andreimpopescu@gmail.com> - 2020-08-26 08:30 +0200
              Re: Signal [Was:] Re: Encrypt files on Linux, decrypt on Windows Celejar <celejar@gmail.com> - 2020-08-26 14:10 +0200
    Re: Encrypt files on Linux, decrypt on Windows Matthew Graybosch <hello@matthewgraybosch.com> - 2020-08-21 20:50 +0200
      Re: Encrypt files on Linux, decrypt on Windows <tomas@tuxteam.de> - 2020-08-21 22:00 +0200
        Re: Encrypt files on Linux, decrypt on Windows Matthew Graybosch <hello@matthewgraybosch.com> - 2020-08-21 22:20 +0200
          Re: Encrypt files on Linux, decrypt on Windows rhkramer@gmail.com - 2020-08-22 02:20 +0200
            Re: Encrypt files on Linux, decrypt on Windows Matthew Graybosch <hello@matthewgraybosch.com> - 2020-08-22 03:30 +0200
              Re: Encrypt files on Linux, decrypt on Windows <tomas@tuxteam.de> - 2020-08-22 09:40 +0200
                Re: Encrypt files on Linux, decrypt on Windows Matthew Graybosch <hello@matthewgraybosch.com> - 2020-08-23 19:10 +0200
            Re: Encrypt files on Linux, decrypt on Windows Jonathan Dowland <jon+debian-user@dow.land> - 2020-08-26 11:40 +0200
              Re: Encrypt files on Linux, decrypt on Windows Hornet <hornetmadness@gmail.com> - 2020-08-29 15:40 +0200
    Re: Encrypt files on Linux, decrypt on Windows Teemu Likonen <tlikonen@iki.fi> - 2020-08-21 21:10 +0200
      Re: Encrypt files on Linux, decrypt on Windows Teemu Likonen <tlikonen@iki.fi> - 2020-08-21 21:20 +0200
        Re: Encrypt files on Linux, decrypt on Windows David Christensen <dpchrist@holgerdanske.com> - 2020-08-21 21:30 +0200
    Re: Encrypt files on Linux, decrypt on Windows David Christensen <dpchrist@holgerdanske.com> - 2020-08-21 21:20 +0200
    Re: Encrypt files on Linux, decrypt on Windows Hans <hans.ullrich@loop.de> - 2020-08-21 22:30 +0200
      Re: Encrypt files on Linux, decrypt on Windows Hans <hans.ullrich@loop.de> - 2020-08-21 22:40 +0200
    Re: Encrypt files on Linux, decrypt on Windows Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2020-08-22 03:10 +0200
    Re: Encrypt files on Linux, decrypt on Windows deloptes <deloptes@gmail.com> - 2020-08-22 09:50 +0200
    Re: Encrypt files on Linux, decrypt on Windows mick crane <mick.crane@gmail.com> - 2020-08-22 12:20 +0200
      "What's wrong with...?" Teemu Likonen <tlikonen@iki.fi> - 2020-08-22 20:30 +0200
        Re: "What's wrong with...?" Dan Ritter <dsr@randomstring.org> - 2020-08-22 20:40 +0200
        Re: "What's wrong with...?" mick crane <mick.crane@gmail.com> - 2020-08-23 08:50 +0200
          Re: "What's wrong with...?" Jonathan Dowland <jon+debian-user@dow.land> - 2020-08-26 11:30 +0200

Page 2 of 3 — ← Prev page 1 [2] 3  Next page →

#226379

On Fri, 21 Aug 2020 19:46:13 +0200 (CEST)
local10 <local10@tutanota.com> wrote:

> Hi,
> 
> What would be a reasonably secure and simple way to encrypt files on
> Linux and then send them to a  non-technical Windows user so she
> would be able decrypt and read them?

The "zip" command has an "--encrypt" option. As long as your recipient
has WinZip (paid or trialware), you should be able to do the following:

1. Use "zip --encrypt" to create an archive.
2. Send the archive.
3. Send the password in a separate email.

I do this at my day job at least once a week, and haven't had a problem
yet.

The zip(1) man page will provide additional details. Good luck.

-- 
Matthew Graybosch		https://matthewgraybosch.com
#include <disclaimer.h>		gemini://starbreaker.org
	 			gemini://tanelorn.city
"Out of order?! Even in the future nothing works."

[toc] | [prev] | [next] | [standalone]

#226390

[Multipart message — attachments visible in raw view] — view raw

On Fri, Aug 21, 2020 at 02:42:23PM -0400, Matthew Graybosch wrote:
> On Fri, 21 Aug 2020 19:46:13 +0200 (CEST)
> local10 <local10@tutanota.com> wrote:
> 
> > Hi,
> > 
> > What would be a reasonably secure and simple way to encrypt files on
> > Linux and then send them to a  non-technical Windows user so she
> > would be able decrypt and read them?
> 
> The "zip" command has an "--encrypt" option. As long as your recipient
> has WinZip (paid or trialware), you should be able to do the following:

If you are somewhat serious about security, you better don't use this:

  "ZIP supports a simple password-based symmetric encryption
   system generally known as ZipCrypto. It is documented in
   the ZIP specification, and known to be seriously flawed." [1]

7z is reportedly better (and it does compress better, too). But I concur
with the others: GnuPG is the gold standard here.

Cheers

[1] https://en.wikipedia.org/wiki/ZIP_(file_format)#Encryption
 - t

[toc] | [prev] | [next] | [standalone]

#226392

On Fri, 21 Aug 2020 21:59:15 +0200
<tomas@tuxteam.de> wrote:

> If you are somewhat serious about security, you better don't use this:
> 
>   "ZIP supports a simple password-based symmetric encryption
>    system generally known as ZipCrypto. It is documented in
>    the ZIP specification, and known to be seriously flawed." [1]
> 
> 7z is reportedly better (and it does compress better, too). But I
> concur with the others: GnuPG is the gold standard here.

I don't disagree, but how likely is it that local10's intended
recipient will...

1. Have GnuPG installed on their Windows machine?
2. Know how to use it to decrypt files using local10's public key?

-- 
Matthew Graybosch		https://matthewgraybosch.com
#include <disclaimer.h>		gemini://starbreaker.org
	 			gemini://tanelorn.city
"Out of order?! Even in the future nothing works."

[toc] | [prev] | [next] | [standalone]

#226398

On Friday, August 21, 2020 04:11:19 PM Matthew Graybosch wrote:
> I don't disagree, but how likely is it that local10's intended
> recipient will...
> 
> 1. Have GnuPG installed on their Windows machine?
> 2. Know how to use it to decrypt files using local10's public key?

Shouldn't this be just the opposite -- local10 should encrypt the file with his 
recipient's public key, and then his recipient can unencrypt it with his (the 
recipient's) private key?

The way you described would be for use as a signature, to prove that local10 
actually sent the file -- anybody with the public key can unencrypt 
demonstrating that local10 inititated the file.

[toc] | [prev] | [next] | [standalone]

#226400

On Fri, 21 Aug 2020 20:10:50 -0400
rhkramer@gmail.com wrote:

> On Friday, August 21, 2020 04:11:19 PM Matthew Graybosch wrote:
> > I don't disagree, but how likely is it that local10's intended
> > recipient will...
> > 
> > 1. Have GnuPG installed on their Windows machine?
> > 2. Know how to use it to decrypt files using local10's public key?  
> 
> Shouldn't this be just the opposite -- local10 should encrypt the
> file with his recipient's public key, and then his recipient can
> unencrypt it with his (the recipient's) private key?

You're right. Please consider my last email proof that exposure to
Windows causes brain damage and that its use in the corporate workplace
should be considered an OSHA violation.

-- 
Matthew Graybosch		https://matthewgraybosch.com
#include <disclaimer.h>		gemini://starbreaker.org
	 			gemini://tanelorn.city
"Out of order?! Even in the future nothing works."

[toc] | [prev] | [next] | [standalone]

#226404

[Multipart message — attachments visible in raw view] — view raw

On Fri, Aug 21, 2020 at 09:28:02PM -0400, Matthew Graybosch wrote:
> On Fri, 21 Aug 2020 20:10:50 -0400
> rhkramer@gmail.com wrote:

[...]

> You're right. Please consider my last email proof that exposure to
> Windows causes brain damage and that its use in the corporate workplace
> should be considered an OSHA violation.

+1 :)

I always thought it should be banned by the Geneva Convention, but
OSHA would be fine by me, too.

Cheers
 - t

[toc] | [prev] | [next] | [standalone]

#226445

On Sat, 22 Aug 2020 09:30:09 +0200
<tomas@tuxteam.de> wrote:

> I always thought it should be banned by the Geneva Convention, but
> OSHA would be fine by me, too.

I think the US stopped honoring the Geneva Conventions during the Dubya
administration. Of course, that doesn't leave much hope for OSHA
enforcement either.

Besides, if we're going to put Microsoft on trial in the Hague for
crimes against humanity, we'll need to do the rest of GAFAM too (not to
mention Disney, Nestlé, Bayer, and a great many others).

-- 
Matthew Graybosch		https://matthewgraybosch.com
#include <disclaimer.h>		gemini://starbreaker.org
	 			gemini://tanelorn.city
"Out of order?! Even in the future nothing works."

[toc] | [prev] | [next] | [standalone]

#226498

On Fri, Aug 21, 2020 at 08:10:50PM -0400, rhkramer@gmail.com wrote:
>Shouldn't this be just the opposite -- local10 should encrypt the file with his
>recipient's public key, and then his recipient can unencrypt it with his (the
>recipient's) private key?

You can perform symmetric encryption with GnuPG too, and not require
public/private keypairs, just a shared passphrase.

-- 
Please do not CC me, I am subscribed to the list.

👱🏻	Jonathan Dowland
✎	 jmtd@debian.org
🔗	https://jmtd.net

[toc] | [prev] | [next] | [standalone]

#226539

[Multipart message — attachments visible in raw view] — view raw

Just use keepass. It installs everywhere and uses decent crypto.

On Wed, Aug 26, 2020, 5:30 AM Jonathan Dowland <jon+debian-user@dow.land>
wrote:

> On Fri, Aug 21, 2020 at 08:10:50PM -0400, rhkramer@gmail.com wrote:
> >Shouldn't this be just the opposite -- local10 should encrypt the file
> with his
> >recipient's public key, and then his recipient can unencrypt it with his
> (the
> >recipient's) private key?
>
> You can perform symmetric encryption with GnuPG too, and not require
> public/private keypairs, just a shared passphrase.
>
> --
> Please do not CC me, I am subscribed to the list.
>
> 👱🏻    Jonathan Dowland
> ✎        jmtd@debian.org
> 🔗      https://jmtd.net
>
>

[toc] | [prev] | [next] | [standalone]

#226383

[Multipart message — attachments visible in raw view] — view raw

* 2020-08-21 19:46:13+02, local wrote:

> What would be a reasonably secure and simple way to encrypt files on
> Linux and then send them to a non-technical Windows user so she would
> be able decrypt and read them?

If your security is just about confidentiality (other's can't have the
content) and you don't have really serious hackers targeting you then
probably encrypted Zip archives are good enough. Obviously a good enough
password is needed and secure ways for exchanging the password.

I would like to suggest OpenPGP as we crypto nerds like to use only the
best available options which work with operations against evil state
enemies. But most people don't have such serious enemies. Any password
will stop almost all third parties.

-- 
/// Teemu Likonen - .-.. http://www.iki.fi/tlikonen/
// OpenPGP: 4E1055DC84E9DFF613D78557719D69D324539450

[toc] | [prev] | [next] | [standalone]

#226386

[Multipart message — attachments visible in raw view] — view raw

* 2020-08-21 22:00:45+03, Teemu Likonen wrote:

> If your security is just about confidentiality (other's can't have the
> content) and you don't have really serious hackers targeting you then
> probably encrypted Zip archives are good enough. Obviously a good enough
> password is needed and secure ways for exchanging the password.

I forgot to say that the file names are not encrypted in Zip archives.
They can be seen without password. To protect against that use Zip
twice: the inner layer is unencrypted archive for all the files and
outer layer encrypts the inner Zip file.

-- 
/// Teemu Likonen - .-.. http://www.iki.fi/tlikonen/
// OpenPGP: 4E1055DC84E9DFF613D78557719D69D324539450

[toc] | [prev] | [next] | [standalone]

#226389

On 2020-08-21 12:10, Teemu Likonen wrote:

> I forgot to say that the file names are not encrypted in Zip archives.
> They can be seen without password. To protect against that use Zip
> twice: the inner layer is unencrypted archive for all the files and
> outer layer encrypts the inner Zip file.

PeaZip has an option to encrypt the file names, and with a 
self-extracting archive *.exe the receipt does not need to install any 
software.


David

[toc] | [prev] | [next] | [standalone]

#226388

On 2020-08-21 10:46, local10 wrote:
> Hi,
> 
> What would be a reasonably secure and simple way to encrypt files on Linux and then send them to a  non-technical Windows user so she would be able decrypt and read them?
> 
> Any ideas? Thanks


I maintain a working Windows installation for use-cases like this and 
have installed PeaZip:

     https://peazip.en.softonic.com/


I use PeaZip to create a self-extracting encrypted 7z archive -- an 
*.exe file -- and send the archive by e-mail or Dropbox.


Once the receipt figures out how to obtain the archive -- anti-spyware 
and e-mail clients tend to block *.exe files -- they can run the 
archive, enter the password in a pop-up dialog, and extract the files 
via a small GUI.


David

[toc] | [prev] | [next] | [standalone]

#226393

[Multipart message — attachments visible in raw view] — view raw

Am Freitag, 21. August 2020, 19:46:13 CEST schrieb local10:
Don't know, how stupid the user is. Try to use a selfexttracting form, like 
blapacked.exe. I suppose, to make a double click on this file, he will most 
likely be able to manage.

Installing software, huh, much too hard for most windows guys....

Best

Hans

> Hi,
> 
> What would be a reasonably secure and simple way to encrypt files on Linux
> and then send them to a  non-technical Windows user so she would be able
> decrypt and read them?
> 
> Any ideas? Thanks

[toc] | [prev] | [next] | [standalone]

#226395

[Multipart message — attachments visible in raw view] — view raw

Am Freitag, 21. August 2020, 22:24:48 CEST schrieb Hans:
Additional info:

Just see here
https://stackoverflow.com/questions/19943903/build-windows-7z-self-extracting-installer-on-linux-server-how-to-change-exe-ic[1] 

Good luck!

Hans

> Am Freitag, 21. August 2020, 19:46:13 CEST schrieb local10:
> Don't know, how stupid the user is. Try to use a selfexttracting form, like
> blapacked.exe. I suppose, to make a double click on this file, he will most
> likely be able to manage.
> 
> Installing software, huh, much too hard for most windows guys....
> 
> Best
> 
> Hans
> 
> > Hi,
> > 
> > What would be a reasonably secure and simple way to encrypt files on Linux
> > and then send them to a  non-technical Windows user so she would be able
> > decrypt and read them?
> > 
> > Any ideas? Thanks



--------
[1] https://stackoverflow.com/questions/19943903/build-windows-7z-self-extracting-installer-on-linux-server-how-to-change-exe-ic

[toc] | [prev] | [next] | [standalone]

#226399

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

On 22/8/20 3:46 am, local10 wrote:
> What would be a reasonably secure and simple way to encrypt files on Linux and then send them to a  non-technical Windows user so she would be able decrypt and read them?
>
> Any ideas? Thanks

Lots of ideas....

Just some to consider besides the other options given.


https://onionshare.org/
 - the tool encrypts files and the receiver decrypts them via Tor Browser Bundle (automatically)


https://emailselfdefense.fsf.org/en/windows.html
 - a little learning required and things are changing (or have changed, depending on version) with Thunderbird (built-in vs enigmail)
  - uses gpg4win, which is an implementation of GNUPG for Windows

Run a Nextcloud instance and provide a read only share for them; or read/write if it is to be both ways and they can drag and drop files for you.

One of the "easiest" options /may/ have been https://send.firefox.com/ -- but who know if or when that "service" will be available again (it was apparently taken down due to abuse)
.

Kind Regards
AndrewM
-----BEGIN PGP SIGNATURE-----

iHUEAREIAB0WIQTJAoMHtC6YydLfjUOoFmvLt+/i+wUCX0BvuwAKCRCoFmvLt+/i
+65CAP4rGHX8s+JMpVZwMMLiJxu97bal6rvvQv0mV7REgtA/eAEAntUxolL6P8b9
yMiZn1oBnHwcuvYABLdYKNzqYAb57mM=
=R+9r
-----END PGP SIGNATURE-----

[toc] | [prev] | [next] | [standalone]

#226406

Darac Marjal wrote:

> Signal (signal.org)
> 
> Signal is an instant messaging application. It uses a well respected
> end-to-end encryption protocol (meaning that the messages are encrypted
> by the client and sent over the internet before being decrypted by the
> recipient's client).

OP asking for file encryption, you answering about messages.
Please try to understand the question first.
Sure you can send also files with Signal, but it is not exactly what was
asked.

[toc] | [prev] | [next] | [standalone]

#226409

On 2020-08-21 18:46, local10 wrote:
> Hi,
> 
> What would be a reasonably secure and simple way to encrypt files on
> Linux and then send them to a  non-technical Windows user so she would
> be able decrypt and read them?
> 
> Any ideas? Thanks

If these are documents what's wrong with open office protected with 
passphrase ?

mick
-- 
Key ID    4BFEBB31

[toc] | [prev] | [next] | [standalone]

#226427 — "What's wrong with...?"

[Multipart message — attachments visible in raw view] — view raw

* 2020-08-22 11:19:17+01, mick crane wrote:

> On 2020-08-21 18:46, local10 wrote:
>> What would be a reasonably secure and simple way to encrypt files on
>> Linux and then send them to a non-technical Windows user so she would
>> be able decrypt and read them?

> If these are documents what's wrong with open office protected with
> passphrase ?

Q: What should we eat today?
A: What's wrong with Chinese food?

Q: What novel do you suggest me to read next?
A: What's wrong with The Three-Body Problem by Liu Cixin?


Is there a culture where "what's wrong with" means "I suggest"? Or is
there a culture where it is common that person's suggestion will be
rejected and they prepare for that by turning it to a question: "What's
wrong with [my suggestion]?"

OK, sorry. No need for long cultural off-topic discussions. I just think
that such counter question are strange. Questions which have completely
wrong premises.

-- 
/// Teemu Likonen - .-.. http://www.iki.fi/tlikonen/
// OpenPGP: 4E1055DC84E9DFF613D78557719D69D324539450

[toc] | [prev] | [next] | [standalone]

#226428 — Re: "What's wrong with...?"

Teemu Likonen wrote: 
> Q: What should we eat today?
> A: What's wrong with Chinese food?
> 
> Q: What novel do you suggest me to read next?
> A: What's wrong with The Three-Body Problem by Liu Cixin?
> 
> 
> Is there a culture where "what's wrong with" means "I suggest"? Or is
> there a culture where it is common that person's suggestion will be
> rejected and they prepare for that by turning it to a question: "What's
> wrong with [my suggestion]?"
> 
> OK, sorry. No need for long cultural off-topic discussions. I just think
> that such counter question are strange. Questions which have completely
> wrong premises.

The question is really:

What's wrong with what I consider the default?

Which is a slightly rude question, as it presupposes that
everyone will consider it the default answer.

Any number of replies can be made, starting with:

- I didn't know about that. What's good about it?

- I knew about that and wanted to know if there was something
  superior.

- I don't consider that a good default. What makes it good here?

- I don't consider that a good choice at all

and so on.

-dsr-

[toc] | [prev] | [next] | [standalone]

Page 2 of 3 — ← Prev page 1 [2] 3  Next page →

Back to top | Article view | linux.debian.user

csiph-web