On 03/10/15 19:09, Chris Green wrote:
I currently use two different file encryption methods, I'm wondering whether to simplify my life (slightly) by just using one. However I'm wondering if there is anything better out there, both as regards usability and effectiveness.
I use encfs for one directory tree of files which I only access occasionally, I have to re-remember the command line way to decrypt them for use but it doesn't usually take long. :-) There are some security problems with encfs but for *file* encryption what else is there?
For some files containing passwords I use vi[le]'s encryption which is known to be weak but it's very handy. I have a trivial script that wraps up the command sequence such that all I have to do is:-
nnnn <name of encrypted file>... and I get prompted for the password, then vi[le] opens the file and I can read it (and edit if if needed).
I did try some encryption breaking software on the password files and it did a pretty bad job, it needs some 'clues' as in words that are present in the file to decrypt and, as the files don't contain many words as such, guessing these would be difficult.
Are there any alternatives? File system encryption doesn't really help as the machine in question is turned on all the time with the desktop open so it would spend its whole time with the file system decrypted. It's not a laptop so it doesn't have a big risk of being stolen or lost.
Alternatives: I don't know. Simplifying: Well you say you have to remember how to decrypt the directory tree so just put it into a script that prompts for a password. That's simpler.
I think the first question is what you're trying to protect and from whom. If the machine's on, does it have a screensaver with a password on it or do you leave it logged in unprotected?
Files containing Passwords? You could put them into a password protecting app like LastPass perhaps.