On Tue, Jun 22, 2010 at 18:40, Rowdyways <[email protected]> wrote: > Little late to bring this up, I guess, but I would be interested in a > short presentation on folder or drive encryption how-to's. > > John > > -- > You received this message because you are subscribed to the Google Groups > "NLUG" group. > To post to this group, send email to [email protected] > To unsubscribe from this group, send email to > [email protected] > For more options, visit this group at > http://groups.google.com/group/nlug-talk?hl=en >
The best method I have found are NOT to use Luks on a portable, machine that would be carried through security checkpoints. And have those machines leave the country and come back in you might find yourself at the end of a munitions felony charge against the USA given political climates of many nations. There is a MAJOR bug in the AES cipher when used with OpenSSL and FUSE/ENCFS. It causes a checksum error in the key which renders it useless and your data unretrievable. The Blowfish cipher is perfectly fine though with the above setup. Truecrypt is too damn complicated when it doesn't need to be ans if you are not extra,extra cautious the hidden inner "plausible deniability container" can be destroyed. GPG is great for email, but it is difficult at best, and requiring a degree in rocket science at most to implement in a Xplatform manner. ie.. get Wintel people to implement it. I personally like two one liner apps: bcrypt and scrypt as backups. The bcrypt cipher is 448 bits. The derivations for scrypt are supposed to be more intense than bcrypt but I have been unable to find a bit value. It is however GPL and the Tarsnap archival designer lets this form of encryption be used minus his service. Lastly, in the spirit of unix. Do one thing and do it well. Openssl is found on every *nix box. It is HIGHLY portable and xplatform migration wise easy for Wintel arenas. You can encrypt text, file or folders easily. I tar.Z my folders, Openssl them, apply lxsplit to the file and backup accordingly onsite and off. Thats what I know. gk -- -- Remember it's not that we have something to hide, we just have nothing we want to show. ---Keep tunnelling. -- You received this message because you are subscribed to the Google Groups "NLUG" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en
