i had this idea that a program can edit files in an encrypted environment. WinRaR with higher level of encryption would be the best way to describe it. but i was wonder if the files on a linux HDD or SDD are encrypted.
I do have this idea that you can save encrypted files to a cloud server and pull it out and unencrypted by a light weight program
You must log in or register to comment.
I do have this idea that you can save encrypted files to a cloud server and pull it out and unencrypted by a light weight program
Sounds like Cryptomator would work for you.
It sounds like you’re trying to make something like: https://github.com/cryptomator/cryptomator
It takes the files that you want to store in the cloud and encrypts them into a bunch of individual files (like encrypted archives) and uploads them to the server. When you access the files it automatically pulls down the archives that contain the files that you want.
You just see a regular directory that’s being synced with the cloud, but the cloud service provider only sees you uploading a bunch of encrypted files with nonsense filenames.
KDE has built in “vaults” now that sound maybe like what you’re looking for.
There is dmcrypt that basically does what you want. IDK if the implementation is in kernel space though. It works through /dev/mapper if that matters.
I’m too high to understand encrypt but it sounds close to what I want. I’ll have to research it later
Look up docs for cryptsetup which is the simplest way to use it. The Debian installer (and maybe others) can set it up for you automatically as well.
Storing files encrypted and decrypting them on-demand is called “encryption at rest”. Linux supports it but is not enabled by default. You can also encrypt /boot to get FDE (Full Disk Encryption) to ensure that the kernel or bootloader is not tampered with. Look into LUKS
This is not entirely correct. Many distributions do enable encryption by default. Also, encrypting the /boot partition does not guarantee the integrity of the boot sequence, you need to enable and correctly configure Secure Boot for that.
Agreed it sounds like op wants luks. Dare I say if you want bitlocker for Linux, it’s luks.
