I am in need of encryption software that would keep files encrypted on the cloud as well as local on all machines.
Here is what I'm looking for:
Downloaded files saved to a particular folder on a Windows 7 or 8 machine would automatically be encrypted (after a prompt for passphrase). Ideally, this folder would be in a Dropbox or Google Drive folder, or on a thumb drive. No record of the unencrypted file would remain on the local PC (I am not worried about pieces of it on swap).
I would prefer that the files are individually encrypted with the same passphrase, rather than added to one large file which is encrypted. I don't want the cloud storage to have to recreate the whole folder, and I don't want a bit error to trash all of my files. The file names do not need to be encrypted.
Since I will be the only user in the foreseeable future, a symmetric encryption scheme would be fine.
From the cloud (preferably) or thumb drive folder, my ruby program running
on Mac OS X would edit the files. I would also want to be able to decrypt the files to view in a text editor or other software, after which I would secure erase copies of decrypted files - again, no unencrypted files on the local machine other than in swap.
This is the ideal. An alternative would be to send the files via https to a web server on the Mac (which could handle encryption in a local Mac environment) and the secure erase the files on the PC. If I did this, could I send the files unencrypted (since https will encrypt them while they are on the internet)?
True Crypt appears to be close to what I want, but it is discontinued. I don't know if I could use something like gpg, since I don't have admin privileges on the PC.
-Dan
Hi Dan,
EncFS on Linux is something I've used this way. Files are encrypted individually, and are otherwise just normal files on the file system. That does mean that ownership, size and permissions are visible as well. You mount the directory to another folder to access plain-text contents. Dropbox would only have the encrypted folder of course.
There are compatible ports for Windows and Mac, as well as a non-free commercial app for iOS. There was one parameter (forget off-hand) which was required, as default creation took the full path into account, and would not be usable anywhere else.
On Aug 12, 2014, at 13:00, Dan Martin ummar143@gmail.com wrote:
I am in need of encryption software that would keep files encrypted on the cloud as well as local on all machines.
Here is what I'm looking for:
Downloaded files saved to a particular folder on a Windows 7 or 8 machine would automatically be encrypted (after a prompt for passphrase). Ideally, this folder would be in a Dropbox or Google Drive folder, or on a thumb drive. No record of the unencrypted file would remain on the local PC (I am not worried about pieces of it on swap).
I would prefer that the files are individually encrypted with the same passphrase, rather than added to one large file which is encrypted. I don't want the cloud storage to have to recreate the whole folder, and I don't want a bit error to trash all of my files. The file names do not need to be encrypted.
Since I will be the only user in the foreseeable future, a symmetric encryption scheme would be fine.
From the cloud (preferably) or thumb drive folder, my ruby program running on Mac OS X would edit the files. I would also want to be able to decrypt the files to view in a text editor or other software, after which I would secure erase copies of decrypted files - again, no unencrypted files on the local machine other than in swap.
This is the ideal. An alternative would be to send the files via https to a web server on the Mac (which could handle encryption in a local Mac environment) and the secure erase the files on the PC. If I did this, could I send the files unencrypted (since https will encrypt them while they are on the internet)?
True Crypt appears to be close to what I want, but it is discontinued. I don't know if I could use something like gpg, since I don't have admin privileges on the PC.
-Dan
-- Dan Martin, MD GP Hospital Practitioner Computer Scientist ummar143@shaw.ca (204) 831-1746 answering machine always on _______________________________________________ Roundtable mailing list Roundtable@muug.mb.ca http://www.muug.mb.ca/mailman/listinfo/roundtable
Thanks Tim
EncFS does almost everything I want, and does it in the background. I have an encrypted directory tree on dropbox. On either of my Macs (laptop or desktop) I can mount a filesystem containing the decrypted version. My software and / or text editors can edit or add to the decrypted version, and it appears encrypted in dropbox instantly. Saved me weeks or days of putting encryption into my program, and I can use it for other things as well.
Exactly what I was looking for!
Of course, I would need administrative privileges to put it on the PC I’m taking files from, but I can manage without - I will get an encrypted USB drive to port the files from the PC to my Mac laptop.
It will still be a pain if I lose my laptop or thumb drive, but at least the sensitive data won’t be exposed and I won’t lose my job!
-Dan
On Aug 13, 2014, at 12:33 PM, Tim Lavoie tim@fractaldragon.net wrote:
Hi Dan,
EncFS on Linux is something I've used this way. Files are encrypted individually, and are otherwise just normal files on the file system. That does mean that ownership, size and permissions are visible as well. You mount the directory to another folder to access plain-text contents. Dropbox would only have the encrypted folder of course.
There are compatible ports for Windows and Mac, as well as a non-free commercial app for iOS. There was one parameter (forget off-hand) which was required, as default creation took the full path into account, and would not be usable anywhere else.
On Aug 12, 2014, at 13:00, Dan Martin ummar143@gmail.com wrote:
I am in need of encryption software that would keep files encrypted on the cloud as well as local on all machines.
Here is what I'm looking for:
Downloaded files saved to a particular folder on a Windows 7 or 8 machine would automatically be encrypted (after a prompt for passphrase). Ideally, this folder would be in a Dropbox or Google Drive folder, or on a thumb drive. No record of the unencrypted file would remain on the local PC (I am not worried about pieces of it on swap).
I would prefer that the files are individually encrypted with the same passphrase, rather than added to one large file which is encrypted. I don't want the cloud storage to have to recreate the whole folder, and I don't want a bit error to trash all of my files. The file names do not need to be encrypted.
Since I will be the only user in the foreseeable future, a symmetric encryption scheme would be fine.
From the cloud (preferably) or thumb drive folder, my ruby program running on Mac OS X would edit the files. I would also want to be able to decrypt the files to view in a text editor or other software, after which I would secure erase copies of decrypted files - again, no unencrypted files on the local machine other than in swap.
This is the ideal. An alternative would be to send the files via https to a web server on the Mac (which could handle encryption in a local Mac environment) and the secure erase the files on the PC. If I did this, could I send the files unencrypted (since https will encrypt them while they are on the internet)?
True Crypt appears to be close to what I want, but it is discontinued. I don't know if I could use something like gpg, since I don't have admin privileges on the PC.
-Dan
-- Dan Martin, MD GP Hospital Practitioner Computer Scientist ummar143@shaw.ca (204) 831-1746 answering machine always on _______________________________________________ Roundtable mailing list Roundtable@muug.mb.ca http://www.muug.mb.ca/mailman/listinfo/roundtable
Dan Martin GP Hospital Practitioner Computer Scientist ummar143@shaw.ca (204) 831-1746 answering machine always on
openssl enc <-- encryption openssl dec <-- decryption
openssl available on almost everything. Keep key on removable media device.
Encrypt new files with said key and add something .enc to it's name. Need some kind of file watcher app (like Hazel on the Mac... not sure don't really automate to that degree these days) to run a batch script whenever a file shows up in the folder that doesn't end in .enc to encrypt.
Wrap your text editor in a decryption->edit->encrypt->replace script.
The multi-platform requirement is what makes things difficult and there are no real viable truecrypt replacements as of yet.
No matter what you choose, key hygiene and automation will be the weakest link in this scheme.
-
Dan Martin -
Dan Martin -
Sean Cody -
Tim Lavoie