Cloud storage is too convenient for many companies and individuals, and we can't avoid it. Fortunately, users only store encrypted files and can regain security. There are many tools available for cloud encryption, some of which are proprietary. But this solution also requires trust - they simply transfer the trust requirements to a third party, and basic security requires users to verify their own security. A better solution is to use an open source tool to encrypt files before they are placed online. The three most useful tools in Linux are EncFS, Cryptomator, and Tahoe-LAFS. As the name implies, each of these tools treats online storage as a virtual file system, but their quality varies widely.CCIE dumps
1.EncFS
EncFS is often used to create encrypted virtual file systems. If you use a storage site that synchronizes the remote directory with the local directory, it can create a remote virtual file system as easily as the local environment. For example, using Dropbox, the command to set everything will be:
1.encfs ~/Dropbox/encrypted ~/Private
This command creates a directory for the encrypted file in the home directory and another directory for the unencrypted file. This command creates an encrypted directory by asking a series of questions. You can press the p key to enter the default paranoid mode, or press the x key to enter the expert mode and manually select the encryption option. The expert question is explained very clearly, so even the novice should answer it effortlessly, just accept the default value. Alternatively, you can run the command with the --standard option (using predefined settings), skipping the answer to the question, which uses predefined settings.
The next time the user synchronizes with the online store on Dropbox, the encrypted directory is added to it. Files added to the / Private directory will be automatically added to ~-Dropbox/-encrypted.
2.Cryptomator
The workflow of Cryptomator is very similar in structure to EncFS. The main difference lies in some terms, such as in Cryptomator, the encrypted directory is called "vault".
After the Cryptomator window opens, it shows the option to create a vault or open a vault. Of course, when the Cryptomator runs for the first time, you must create a vault by giving the path and password. Going back to the open window, the user can open the vault and use the system's file manager to copy the file to the vault. All files added to the vault are automatically encrypted. As with EncFS, vaults stored in the local directory of a storage provider such as Dropbox are uploaded to the cloud when the user synchronizes.
Whether you prefer EncFS or Cryptomator depends on your habits. If you want to have control over the encryption process, you might prefer EncFS. However, if you prefer desktop applications, you may prefer Cryptomator.
Figure 2. Cryptomator has a graphical interface that everyone can use for encryption
3.Tahoe-LAFS
Tahoe-LAFS offers the most comprehensive solution. The full name of LAFS is "Least Authority FileSystem", which refers to the classic principle: the file system with the least power. Tahoe is basically designed to provide cloud storage providers with as little control as possible of user data.
First, Tahoe automatically encrypts all files with a 2000-bit RSA public key. It includes options for encrypting files and options for using Tor.
However, Tahoe is unique in that it distracts the file. Users can set up a grid (server collection) for storage. This feature means that files can actually be stored on multiple servers. For example, a user can store a portion of a file on Dropbox and another portion on a Google storage service so that no service can fully control the file. To decrypt and open a file, the user must access all storage accounts.
In addition, each file protects against server failure or any other data loss. By default, each file has 10 sections or shared areas, and any three of them are required to use the file. Most shared areas may actually be lost, and files can still be retrieved. After each file is uploaded, the user can adjust the sharing area to a maximum of 256. Fewer sharing areas require fewer plans, and more shared areas provide greater security. For each location in the upload share, Tahoe added a file limit, which is used to check encryption key integrity, find other shared areas, and retrieve files. Instead of user information or permissions, access to the file is governed by the encryption key information. For added security, the uploaded file cannot be edited and must be uploaded again if any changes are made to it. At each step, the storage provider has minimal privileges, just a completely passive role.
In addition to this basic arrangement, Tahoe includes an optional web interface and a utility that tells the user if the number of shared areas is less than the minimum required for retrieval. You can also use a wide range of related projects, including backup tools, utility sets, and plug-ins for use with other applications, including Puppet.CCIE dumps 2019
Tahoe needs a strategic plan and may take some time to set up before uploading any files. If there is no perfect strategy for the number of shared areas or online storage locations, the results can easily become confusing. However, once set in place, the security provided by Tahoe is second to none.
1.EncFS
EncFS is often used to create encrypted virtual file systems. If you use a storage site that synchronizes the remote directory with the local directory, it can create a remote virtual file system as easily as the local environment. For example, using Dropbox, the command to set everything will be:
1.encfs ~/Dropbox/encrypted ~/Private
This command creates a directory for the encrypted file in the home directory and another directory for the unencrypted file. This command creates an encrypted directory by asking a series of questions. You can press the p key to enter the default paranoid mode, or press the x key to enter the expert mode and manually select the encryption option. The expert question is explained very clearly, so even the novice should answer it effortlessly, just accept the default value. Alternatively, you can run the command with the --standard option (using predefined settings), skipping the answer to the question, which uses predefined settings.
The next time the user synchronizes with the online store on Dropbox, the encrypted directory is added to it. Files added to the / Private directory will be automatically added to ~-Dropbox/-encrypted.
2.Cryptomator
The workflow of Cryptomator is very similar in structure to EncFS. The main difference lies in some terms, such as in Cryptomator, the encrypted directory is called "vault".
After the Cryptomator window opens, it shows the option to create a vault or open a vault. Of course, when the Cryptomator runs for the first time, you must create a vault by giving the path and password. Going back to the open window, the user can open the vault and use the system's file manager to copy the file to the vault. All files added to the vault are automatically encrypted. As with EncFS, vaults stored in the local directory of a storage provider such as Dropbox are uploaded to the cloud when the user synchronizes.
Whether you prefer EncFS or Cryptomator depends on your habits. If you want to have control over the encryption process, you might prefer EncFS. However, if you prefer desktop applications, you may prefer Cryptomator.
Figure 2. Cryptomator has a graphical interface that everyone can use for encryption
3.Tahoe-LAFS
Tahoe-LAFS offers the most comprehensive solution. The full name of LAFS is "Least Authority FileSystem", which refers to the classic principle: the file system with the least power. Tahoe is basically designed to provide cloud storage providers with as little control as possible of user data.
First, Tahoe automatically encrypts all files with a 2000-bit RSA public key. It includes options for encrypting files and options for using Tor.
However, Tahoe is unique in that it distracts the file. Users can set up a grid (server collection) for storage. This feature means that files can actually be stored on multiple servers. For example, a user can store a portion of a file on Dropbox and another portion on a Google storage service so that no service can fully control the file. To decrypt and open a file, the user must access all storage accounts.
In addition, each file protects against server failure or any other data loss. By default, each file has 10 sections or shared areas, and any three of them are required to use the file. Most shared areas may actually be lost, and files can still be retrieved. After each file is uploaded, the user can adjust the sharing area to a maximum of 256. Fewer sharing areas require fewer plans, and more shared areas provide greater security. For each location in the upload share, Tahoe added a file limit, which is used to check encryption key integrity, find other shared areas, and retrieve files. Instead of user information or permissions, access to the file is governed by the encryption key information. For added security, the uploaded file cannot be edited and must be uploaded again if any changes are made to it. At each step, the storage provider has minimal privileges, just a completely passive role.
In addition to this basic arrangement, Tahoe includes an optional web interface and a utility that tells the user if the number of shared areas is less than the minimum required for retrieval. You can also use a wide range of related projects, including backup tools, utility sets, and plug-ins for use with other applications, including Puppet.CCIE dumps 2019
Tahoe needs a strategic plan and may take some time to set up before uploading any files. If there is no perfect strategy for the number of shared areas or online storage locations, the results can easily become confusing. However, once set in place, the security provided by Tahoe is second to none.
Comments
Post a Comment