Tiwb

我的业余生活博客.

使用ecryptfs来加密数据存储

其实好几年前就开始用这个方案了,现在资料都备份在云上,所以为了安全还是加密一下比较好。最近想新建一个加密的文件夹, 结果又忘了怎么操作了……

ecryptfs我已经装好了, 所以就只记录下如何操作。

使用:

$ mount -t ecryptfs /unencrypted/path /mount/path
Select key type to use for newly created files:
 1) openssl
 2) tspi
 3) passphrase
Selection: 3
Passphrase: ******
Select cipher:
 1) aes: blocksize = 16; min keysize = 16; max keysize = 32 (not loaded)
 2) blowfish: blocksize = 16; min keysize = 16; max keysize = 56 (not loaded)
 3) des3_ede: blocksize = 8; min keysize = 24; max keysize = 24 (not loaded)
 4) cast6: blocksize = 16; min keysize = 16; max keysize = 32 (not loaded)
 5) cast5: blocksize = 8; min keysize = 5; max keysize = 16 (not loaded)
Selection [aes]: 
Select key bytes:
 1) 16
 2) 32
 3) 24
Selection [16]: 
Enable plaintext passthrough (y/n) [n]: 
Enable filename encryption (y/n) [n]: y
Filename Encryption Key (FNEK) Signature [****************]:
Attempting to mount with the following options:
 ecryptfs_unlink_sigs
 ecryptfs_fnek_sig=****************
 ecryptfs_key_bytes=16
 ecryptfs_cipher=aes
 ecryptfs_sig=****************
Mounted eCryptfs

其中要注意原始目录和要mount的目录不能是一样的。