Re: Crypt Folder

2013-12-18 Thread Iker Bilbao

In order to ensure data is password-protected crypted and nobody
else but the decrypting-session can see decrypted data: another session
for the same user (stolen login) must see data crypted.

Specs in Encfs says so for different location sessions but in my
tests data is unencrypted for any session of the same user: decrypts in
SSH session and local sessions and any other machine's ssh login can see
decrypted data.





El dc 18 de 12 de 2013 a les 16:29 +1100, en/na Zenaan Harkness va
escriure:

 On 12/16/13, Iker Bilbao iker.bil...@gmail.com wrote:
  Dear list ;-),
 
  I am looking for a en/de-crypting folder solution. I need to crypt a
  folder and de-crypt only for a session. I mean: when a user manually
  decrypts that folder it must remain crypted for other sessions of the
  same user (same login through SSH, for example)
 
 Why?




Re: Crypt Folder

2013-12-17 Thread Zenaan Harkness
On 12/16/13, Iker Bilbao iker.bil...@gmail.com wrote:
 Dear list ;-),

 I am looking for a en/de-crypting folder solution. I need to crypt a
 folder and de-crypt only for a session. I mean: when a user manually
 decrypts that folder it must remain crypted for other sessions of the
 same user (same login through SSH, for example)

Why?


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CAOsGNSRnvs=Y_2p==rio1kgbu3o8xfbsfgkr_bwuwkc8mah...@mail.gmail.com



Re: Crypt Folder

2013-12-17 Thread David Christensen

On 12/16/2013 04:22 AM, Iker Bilbao wrote:

 I am looking for a en/de-crypting folder solution. I need to crypt a
folder and de-crypt only for a session. I mean: when a user manually
decrypts that folder it must remain crypted for other sessions of the
same user (same login through SSH, for example) and any other users.


Have you looked at dm-crypt/ LUKS/ cryptsetup?


David


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/52b14301.1060...@holgerdanske.com



Crypt Folder

2013-12-16 Thread Iker Bilbao
Dear list ;-),

I am looking for a en/de-crypting folder solution. I need to crypt a
folder and de-crypt only for a session. I mean: when a user manually
decrypts that folder it must remain crypted for other sessions of the
same user (same login through SSH, for example) and any other users.

I have not yet simulated this scenario but I really appreciate
collaboration. I want to match theory with real-world (ups, virtualized
machine) results.

Furthermore, I will appreciate any ideas about PGP vs SSL vs AES
encryption. My favourite is OpenSSL with AES-256. Any recommendation?
Security issues are much more important than performance.

Thanks,

Iker Bilbao.



Re: Crypt Folder

2013-12-16 Thread Zenaan Harkness
On 12/16/13, Iker Bilbao iker.bil...@gmail.com wrote:
 I am looking for a en/de-crypting folder solution. I need to crypt a
 folder and de-crypt only for a session. I mean: when a user manually
 decrypts that folder it must remain crypted for other sessions of the
 same user (same login through SSH, for example) and any other users.

Sounds like that is something that would be not off the shelf. tcplay
will do like truecrypt does on Windows and Linux (fully truecrypt
compatible), but I think command line only, which sounds adequate. But
if you mount a crypt (making it available to that user/unencrypted),
then ordinarily all sessions of that user would have the crypt
available.

 I have not yet simulated this scenario but I really appreciate
 collaboration. I want to match theory with real-world (ups, virtualized
 machine) results.

Sure.

What's the theory where what you are asking actually makes sense/ is useful?

I'm not grokking how what you ask is useful.

 Furthermore, I will appreciate any ideas about PGP vs SSL vs AES
 encryption. My favourite is OpenSSL with AES-256. Any recommendation?

Please do tell us why you like OpenSSL as your preference?

What size folders would you be encrypting with this library?

 Security issues are much more important than performance.

What is the security purpose for decrypting a folder on only one login
of a user? Some clarity might help us help you.

Thanks
Zenaan


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CAOsGNSSyP+fw3miA0f-=xphbgariktakl8vzftc0xojcerk...@mail.gmail.com



Re: Crypt Folder

2013-12-16 Thread Frank
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 12/16/2013 01:22 PM, Iker Bilbao wrote:
 
 I am looking for a en/de-crypting folder solution. I need to crypt
 a folder and de-crypt only for a session. I mean: when a user
 manually decrypts that folder it must remain crypted for other
 sessions of the same user (same login through SSH, for example) and
 any other users.
 
 I have not yet simulated this scenario but I really appreciate 
 collaboration. I want to match theory with real-world (ups,
 virtualized machine) results.
 
 Furthermore, I will appreciate any ideas about PGP vs SSL vs AES 
 encryption. My favourite is OpenSSL with AES-256. Any
 recommendation? Security issues are much more important than
 performance.

Have a look at encfs.

Cheers
frank
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Icedove - http://www.enigmail.net/

iQEcBAEBAgAGBQJSrvMjAAoJEBkoJgvmrcuiBvcH/0n6P78KVnt38/WPHwqaml5O
FYjYaazGU08NdWvBu3qrD1JuN9zsncbyRnQmetwfwrY+c98T5XW8os0ruMtGPxyw
EXpfZth9BME5raVGCm1uTvow7icQaPnGkT3VhiBhZ99YMqZJONiqUWgtkg/zEmfE
ItwRqODUtGzIv6TE8ttQdiO+6C2zFipo6z5pAKeqeXz6LjDyEB6whjiy7NtdAFfB
KnyWn4GdeLgVrBEaeNATYEKqbr4UEDK3crkrjfoOt8sYhg14CJSrLEOpM/UXg9Rb
0TG4FKqhd973yDrlXLwRSG/ffdcLolIWMk+HudaFAp6hDzz1Ug1AOw0lxXeL1Ns=
=Xot3
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/52aef323.9000...@dead-link.org