Rubutun kundayen kan GNU / Linux tare da eCryptfs

Idan ya shafi kiyaye bayananmu da sirrinmu, babu wani ƙoƙari da zai zama babba, kuma ɓoye bayanan wani lokaci zai iya ceton mu da ciwon kai da yawa.

Tabbas kun san wasu kayan aiki don aikin ɓoye fayiloli kamar GnuPG wanda zamu iya ɓoye fayiloli ɗaya bayan ɗaya (ɗan gajeren aiki idan muna buƙatar ɓoye adadi mai yawa) DA Cryptsetup wanda zamu iya ɓoye dukkan abubuwan da ke cikin diski mai wuya (ko da kyau bangare) zai yiwu

Amma idan kuna buƙatar kayan aiki wanda zai ba ku mafi kyawun waɗannan aikace-aikacen guda biyu, to kuna buƙata majin

majin, aikace-aikace ne da muke aiwatarwa ta layin umarni kuma da shi zamu iya rufin kundayen adireshi a cikin GNU / Linux a rago 256 kuma da su zamu iya kirkirar bayanan sirri da kuma rubutattun bayanai a hannu da kai tsaye.

Wannan kayan aikin yana cikin kwayar Linux tunda sigar 2.6 kuma itace wacce ake amfani da ita lokacin da muka kunna kundin adireshin a Ubuntu Rufaffen Gida. Fa'idar da yake ba mu ta hanyar kasancewa cikin ainihin shine cewa ta riga ta sami haɓaka mafi kyau kuma tare da wannan zamu iya tsammanin iyakar aiki yayin amfani da shi.

Don haka idan zaku yi amfani da shi kawai kuna buƙatar shigar da kunshin ecryptfs-utils:

$ sudo Mount -t ecryptfs

Bayan haka, zai tambaye mu mu shigar da kalmar sirri da za mu yi amfani da ita da sauran tambayoyin da za mu iya barin su tare da halayensu na yau da kullun ta danna shigar. Da zarar mun gama kuma mun riga mun nuna kundin adireshin da za a ɓoye a cikin kundin adireshin makoma, waɗannan ma za su bayyana a cikin kundin adireshin amma tare da abubuwan da aka riga aka ɓoye.

Abin da ke cikin kundin adireshi shine fayilolin ɓoye kafin aiwatar da umarnin Dutsen, kuma zasu kasance ɓoye har sai munyi amfani da umarnin kauda kai kuma wannan shine yadda zamu sake ganin rubutattun fayilolin.

$ sudo umount / dir / enc

Waɗannan tambayoyin da eCryptfs suke tambaya suna da ma'amala, kuma a nan na kawo muku su don ku sami cikakken haske game da menene:

• La fasara ko mabuɗin don ɓoyewa.
• El boye-boye algorithm wanda ta tsoho shine AES.
• Mabuɗin girma, wanda ya zama bytes 16 ta tsohuwa
• Bayyana fasalin don samun damar isa ga fayilolin da ba a ɓoye su ba.
• Ɓoye sunayen fayil, kawai yana ɓoye abun ciki ta hanyar tsoho.

Wani abu da dole ne a kula dashi shine idan akwai fayiloli a cikin kundin adireshin da ba'a ɓoye su ba, idan muka kunna Bayyanar bayanan, Muna iya samun damar yin amfani da waɗannan fayilolin da abubuwan da ke ciki daga kundin adireshin makoma, amma dole ne a kunna a baya tunda an kashe shi kuma ba zai yiwu a sami damar wannan abun ba.

Haka kuma lokacin da muka kunna boye-boye na sunayen fayil Dole ne mu nuna sa hannun mabuɗin da za mu yi amfani da shi, wannan daidai yake da ake amfani da shi don ɓoye abun ciki, duk da haka akwai lokuta inda dole ne mu canza shi. Ta yin amfani da wannan fasalin, sunayen fayilolin za su kasance a cikin kundin adireshin asalin kawai azaman kirtanin "ƙage-bazuwar".

Lokacin da muka sanya kalmar wucewa a karon farko, eCryptfs zai gaya mana cewa ba a yi amfani da wannan kalmar ba a da kuma zai tambaye mu idan muna son ci gaba, idan mun tabbata cewa an rubuta daidai muna rubuta “eh”, to zai tambaye mu idan muna so mu adana sa hannun na mabuɗin cikin fayil /root/.ecryptfs/sig-cache.txt idan muka adana shi, ba zai sake yi mana waɗannan tambayoyin ba. Koyaya, idan muka adana maɓallan ta buga "eh" amma tambayoyin da suka gabata sun sake bayyana, ba mu shigar da maɓallin daidai ba.