TODO - add additional notes
A cryptographic filesystem.
An absolutely mandatory concept and program.
Be aware that attacks on people, hardware and implementation are the go-to methods for defeating encryption. Some points:
- A legal or physical threat, lies and other social engineering.
- A hardware or software keylogger. Are you typing your password on a keyboard and computer you control?
eCryptfs-mount.sh is my helper script
TODO - Where the fnek is the fnek signature stored?
2016-03-28 - 108 ∞
I found eCryptfs via Ubuntu thanks to http://pkgs.org/search/ecryptfs
1. Install slpkg
2. Install alien
slpkg -s sbo alien
\wget -c http://archive.ubuntu.com/ubuntu/pool/main/e/ecryptfs-utils/ecryptfs-utils_108-0ubuntu1_i386.deb \alien ecryptfs-utils_108-0ubuntu1_i386.deb -t \installpkg ecryptfs-utils-108.tgz
\wget -c http://archive.ubuntu.com/ubuntu/pool/main/e/ecryptfs-utils/libecryptfs1_108-0ubuntu1_i386.deb \alien libecryptfs1_108-0ubuntu1_i386.deb -t \installpkg libecryptfs1-108.tgz
2016-03-26 - 104 ∞
I think I originally had this installed via a third-party repository.
Some time recently, I had some more silent data corruption. It could be this, or it could be Btrfs.
Both encrypted and unencrypted data ∞
eCryptfs-mount.sh foo \echo encrypted>foo/enc.txt \sudo \umount foo \echo unencrypted>foo/unenc.txt eCryptfs-mount.sh foo
Looking inside the now-unencrypted directory "foo" will show the encrypted and unencrypted files side-by-side. However, "unenc.txt" will not be readable at this time. "foo" would have to be unmounted for "unenc.txt" to become readable again. Interesting.
Learn to use a file thingy?: ∞
- use both a file and a keyphrase?
back up the file onto redundant usb drives
- keep one of the usb sticks in a more secure location?
"no space left on device" ∞
can be caused by bad filenames being copied into the eCryptfs volume. Confirmed:
- A leading space
.rus filenames -- presumably any significant amount of extended characters.
- .jap seems to be ok, or these filenames were short enough.
- other languages untested