Arch Linux

detox332

Member

From: University of Pittsburgh

Registered: 2007-06-12

Posts: 63

Sorry to the encFS wiki guy

So in my attempt to add to the ArchWiki I successfully saved over someone else's wiki page (I went to http://wiki.archlinux.org/index.php/My_New_Page like it said, but clearly I didn't do everything correctly)...luckily I realized what happened quickly and was able to at least save what was there before.

[[Category:Security]]
[[Category:HOWTOs (English)]]

In a lot of circumstances it makes sense to secure data on your computer using cryptographic tools. EncFS is a userspace cryptographic filesystem, and aims to secure your data with the minimum of hassle.  It uses [http://fuse.sourceforge.com FUSE] to mount an encrypted directory onto another directory specified by the user. It does not use a loopback system like some other comparable systems such as [http://www.truecrypt.org TrueCrypt] and [http://www.saout.de/misc/dm-crypt/ DM-Crypt].

This has a number of advantages, and some disadvantages compared to these systems.  Firstly it does not require any root privileges to implement, any user can create a repository of encrypted files, and use them. Secondly you do not need to create a single file and create a filesystem within that, it works on your existing filesystem, with no modifications. 

This does create a few disadvantages though, because the encrypted files are not stored in their own file, someone who obtains access to the machine can still see the underlying directory structure, the number of files, their sizes and when they were modified.  They cannot see the contents though.

This particular method of securing your data is obviously not perfect, but it does have situations in which it is useful.

To install EncFS, as root, do:
pacman -Sy encfs
You will need the community repository enabled to do this.

To create a secured repository, type:
encfs ~/.crypt ~/crypt
You will be prompted whether you want to go with the default (paranoid options) or expert configuration. The latter allows you to specify algorithms and other options. The former is a fairly good default though.   You will also be prompted to set a key for encryption. Once this has been done you will have your encoded filesystem created and mounted.  The encoded files are stored in ~/.crypt, and their unencrypted versions in ~/crypt.

To unmount the filesystem type:
fusermount -u ~/crypt
And all will be done.

When you want to remount the filesystem, you simply retype the first command, and you will be asked for the key you used to encode with, once this has been entered, then the filesystem will be mounted again.

I don't know who the author of this article was, but above is the article in whole...if someone more familiar could please re-add this to the wiki I would greatly appreciate it.

My appologies to whomever wrote the article, it was not my intention to do this.
~Matt

Last edited by detox332 (2008-11-20 07:40:52)

---

Arch64
KDE4 user

Zeist

Arch Linux f@h Team Member

Registered: 2008-07-04

Posts: 532

Re: Sorry to the encFS wiki guy

It's actually available in the history as well... same as with any changes on the wiki:
http://wiki.archlinux.org/index.php?tit … ldid=51634

---

I haven't lost my mind; I have a tape back-up somewhere.
Twitter

subw

Member

Registered: 2008-10-29

Posts: 3

Re: Sorry to the encFS wiki guy

Actually, I had no history of the article. I have now restored it to the above, which works as expected.