Re: [SLUG] Simple and reliable home folder encryption for Ubuntu 6.10

2006-11-30 Thread Glen Turner

Ben wrote:

I need to encrypt the home folder on my laptop and desktop. I realise
there are vulnerabilities associated with not encrypting the whole
disk, but I'm willing to cope with a lower level of protection as I'm
more concerned about accidental loss or casual theft, rather than a
targetted attack.

I've spent some time looking up encryption and there doesn't seem to
be a shortage of choice.

I'm looking for a recommendation on a method that favours simplicity
and reliability (performance is not a major concern).


If you distribution ships pam_mount then it and dm_crypt work
well together to encrypt /home/$USER.  I use it and it just works.

If you have a machine used mainly by you, then you can use a
real/LVM partition rather than a loopback filesystem as the
dm_crypt storage. This takes out a lot of the configuration
complexity. If you use LVM then you needn't fret about
getting the partition size wrong (although growing the
encrypted file system is more work than it should be).

You should also use dm_crypt to encrypt the swap partition,
or dd /dev/random into swap as part of your shutdown.

Bloody annoyingly the Linux suspend-to-disk has no option to
send the suspended memory through encryption before it stores
it to disk.  So you can't use suspend and stay safe if someone
nicks your laptop.

--
 Glen Turner Tel: (08) 8303 3936 or +61 8 8303 3936
 Australia's Academic  Research Network  www.aarnet.edu.au
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


RE: [SLUG] Simple and reliable home folder encryption for Ubuntu 6.10

2006-11-29 Thread Stephen Black
Why not just encrypt the the documents you need
Some products will even append the encrypted data to the end of an image file
so that when you open the file it looks like a picture. and the only clue that 
there is
anything more than meets the eye is that the image file is bigger than it 
actually needs to be
I believe that is the encryption that I would prefer and If I could find a 
program to do this in Linux
I would be very happy and dance around going Yay !

-Original Message-
From:   Ben [SMTP:[EMAIL PROTECTED]
Sent:   Tuesday, November 28, 2006 7:22 PM
To: slug@slug.org.au
Subject:[SLUG] Simple and reliable home folder encryption for Ubuntu 
6.10

I need to encrypt the home folder on my laptop and desktop. I realise
there are vulnerabilities associated with not encrypting the whole
disk, but I'm willing to cope with a lower level of protection as I'm
more concerned about accidental loss or casual theft, rather than a
targetted attack.

I've spent some time looking up encryption and there doesn't seem to
be a shortage of choice.

I'm looking for a recommendation on a method that favours simplicity
and reliability (performance is not a major concern).

Ben
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Simple and reliable home folder encryption for Ubuntu 6.10

2006-11-29 Thread Zhasper

I've heard lots of good things about http://www.truecrypt.org/ - never
used it myself though.

It sounds like it's probably overkill for what you're looking for...

On 11/28/06, Ben [EMAIL PROTECTED] wrote:

I need to encrypt the home folder on my laptop and desktop. I realise
there are vulnerabilities associated with not encrypting the whole
disk, but I'm willing to cope with a lower level of protection as I'm
more concerned about accidental loss or casual theft, rather than a
targetted attack.

I've spent some time looking up encryption and there doesn't seem to
be a shortage of choice.

I'm looking for a recommendation on a method that favours simplicity
and reliability (performance is not a major concern).

Ben
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html





--
There is nothing more worthy of contempt than a man who quotes himself
- Zhasper, 2004
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Simple and reliable home folder encryption for Ubuntu 6.10

2006-11-29 Thread Ben

On 11/30/06, Stephen Black [EMAIL PROTECTED] wrote:

Why not just encrypt the the documents you need


I have a large number of files that need to be encrypted, of varying
types, including locally stored email. The files I need to encrypt
also need to be modified regularly.


Some products will even append the encrypted data to the end of an image file
so that when you open the file it looks like a picture. and the only clue that 
there is
anything more than meets the eye is that the image file is bigger than it 
actually needs to be


For this sort of thing I would probably use a TrueCrypt hidden volume.


I believe that is the encryption that I would prefer and If I could find a 
program to do this in Linux
I would be very happy and dance around going Yay !


Here's a few:
http://home.earthlink.net/~emilbrandt/stego/softwareunix.html

Ben
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Simple and reliable home folder encryption for Ubuntu 6.10

2006-11-29 Thread Sonia Hamilton
* On Tue, Nov 28, 2006 at 07:21:32PM +1100, Ben wrote:
 I need to encrypt the home folder on my laptop and desktop. I realise
 there are vulnerabilities associated with not encrypting the whole
 disk, but I'm willing to cope with a lower level of protection as I'm
 more concerned about accidental loss or casual theft, rather than a
 targetted attack.
 
 I've spent some time looking up encryption and there doesn't seem to
 be a shortage of choice.
 
 I'm looking for a recommendation on a method that favours simplicity
 and reliability (performance is not a major concern).

The Ubuntu Hacks book has a hack (#70) about doing this - you could
'sudo apt-get install dmsetup cryptsetup' and read the doco, or get the
book :-)

-- 
Sonia Hamilton. GPG key A8B77238.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Simple and reliable home folder encryption for Ubuntu 6.10

2006-11-28 Thread Ben

I need to encrypt the home folder on my laptop and desktop. I realise
there are vulnerabilities associated with not encrypting the whole
disk, but I'm willing to cope with a lower level of protection as I'm
more concerned about accidental loss or casual theft, rather than a
targetted attack.

I've spent some time looking up encryption and there doesn't seem to
be a shortage of choice.

I'm looking for a recommendation on a method that favours simplicity
and reliability (performance is not a major concern).

Ben
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html