Rubutun kundayen kan GNU / Linux tare da eCryptfs

Idan ya shafi kiyaye bayananmu da sirrinmu, babu wani ƙoƙari da zai zama babba, kuma ɓoye bayanan wani lokaci zai iya ceton mu da ciwon kai da yawa.

eCryptfs-logo-karshe

Tabbas kun san wasu kayan aiki don aikin ɓoye fayiloli kamar GnuPG wanda zamu iya ɓoye fayiloli ɗaya bayan ɗaya (ɗan gajeren aiki idan muna buƙatar ɓoye adadi mai yawa) DA Cryptsetup wanda zamu iya ɓoye dukkan abubuwan da ke cikin diski mai wuya (ko da kyau bangare) zai yiwu

Amma idan kuna buƙatar kayan aiki wanda zai ba ku mafi kyawun waɗannan aikace-aikacen guda biyu, to kuna buƙata majin

majin, aikace-aikace ne da muke aiwatarwa ta layin umarni kuma da shi zamu iya rufin kundayen adireshi a cikin GNU / Linux a rago 256 kuma da su zamu iya kirkirar bayanan sirri da kuma rubutattun bayanai a hannu da kai tsaye.

images

Wannan kayan aikin yana cikin kwayar Linux tunda sigar 2.6 kuma itace wacce ake amfani da ita lokacin da muka kunna kundin adireshin a Ubuntu Rufaffen Gida. Fa'idar da yake ba mu ta hanyar kasancewa cikin ainihin shine cewa ta riga ta sami haɓaka mafi kyau kuma tare da wannan zamu iya tsammanin iyakar aiki yayin amfani da shi.

Don haka idan zaku yi amfani da shi kawai kuna buƙatar shigar da kunshin ecryptfs-utils:

$ sudo Mount -t ecryptfs

Bayan haka, zai tambaye mu mu shigar da kalmar sirri da za mu yi amfani da ita da sauran tambayoyin da za mu iya barin su tare da halayensu na yau da kullun ta danna shigar. Da zarar mun gama kuma mun riga mun nuna kundin adireshin da za a ɓoye a cikin kundin adireshin makoma, waɗannan ma za su bayyana a cikin kundin adireshin amma tare da abubuwan da aka riga aka ɓoye.

ecryptfs-saitin

Abin da ke cikin kundin adireshi shine fayilolin ɓoye kafin aiwatar da umarnin Dutsen, kuma zasu kasance ɓoye har sai munyi amfani da umarnin kauda kai kuma wannan shine yadda zamu sake ganin rubutattun fayilolin.

$ sudo umount / dir / enc

Waɗannan tambayoyin da eCryptfs suke tambaya suna da ma'amala, kuma a nan na kawo muku su don ku sami cikakken haske game da menene:

  • La fasara ko mabuɗin don ɓoyewa.
  • El boye-boye algorithm wanda ta tsoho shine AES.
  • Mabuɗin girma, wanda ya zama bytes 16 ta tsohuwa
  • Bayyana fasalin don samun damar isa ga fayilolin da ba a ɓoye su ba.
  • Ɓoye sunayen fayil, kawai yana ɓoye abun ciki ta hanyar tsoho.

ssl-takardar shaidar

Wani abu da dole ne a kula dashi shine idan akwai fayiloli a cikin kundin adireshin da ba'a ɓoye su ba, idan muka kunna Bayyanar bayanan, Muna iya samun damar yin amfani da waɗannan fayilolin da abubuwan da ke ciki daga kundin adireshin makoma, amma dole ne a kunna a baya tunda an kashe shi kuma ba zai yiwu a sami damar wannan abun ba.

Haka kuma lokacin da muka kunna boye-boye na sunayen fayil Dole ne mu nuna sa hannun mabuɗin da za mu yi amfani da shi, wannan daidai yake da ake amfani da shi don ɓoye abun ciki, duk da haka akwai lokuta inda dole ne mu canza shi. Ta yin amfani da wannan fasalin, sunayen fayilolin za su kasance a cikin kundin adireshin asalin kawai azaman kirtanin "ƙage-bazuwar".

ɓoye-fayiloli-da-kundin adireshi-kan-Linux-10-638

Lokacin da muka sanya kalmar wucewa a karon farko, eCryptfs zai gaya mana cewa ba a yi amfani da wannan kalmar ba a da kuma zai tambaye mu idan muna son ci gaba, idan mun tabbata cewa an rubuta daidai muna rubuta “eh”, to zai tambaye mu idan muna so mu adana sa hannun na mabuɗin cikin fayil /root/.ecryptfs/sig-cache.txt idan muka adana shi, ba zai sake yi mana waɗannan tambayoyin ba. Koyaya, idan muka adana maɓallan ta buga "eh" amma tambayoyin da suka gabata sun sake bayyana, ba mu shigar da maɓallin daidai ba.


Abubuwan da ke cikin labarin suna bin ka'idodinmu na ka'idojin edita. Don yin rahoton kuskure danna a nan.

3 comments, bar naka

Bar tsokaci

Your email address ba za a buga.

*

*

  1. Mai alhakin bayanan: Miguel Ángel Gatón
  2. Dalilin bayanan: Gudanar da SPAM, gudanar da sharhi.
  3. Halacci: Yarda da yarda
  4. Sadarwar bayanan: Ba za a sanar da wasu bayanan ga wasu kamfanoni ba sai ta hanyar wajibcin doka.
  5. Ajiye bayanai: Bayanin yanar gizo wanda Occentus Networks (EU) suka dauki nauyi
  6. Hakkoki: A kowane lokaci zaka iyakance, dawo da share bayanan ka.

  1.   hikima m

    Ina amfani da baka (manjaro a yanzu tunda yana saukaka shigar lxqt) kuma daga AUR nakan sanya cryptkeeper wanda yake sauƙaƙa komai sosai kuma ina tsammanin zai zama kamar GUI mai sauƙin ɓoye manyan fayiloli tare da ecryptfs.

  2.   Ruben m

    Ina matukar bukatar sani (duk da ina ganin ban cika magana ba), idan akwai wata manhaja da zata bani damar yin kwafa kai tsaye, kamar shirin da yake zuwa da faya-fayan Western Digital "MY PASPORT".
    Wannan shirin yana aiki kawai akan Windows.
    Godiya a gaba.

  3.   Nuri m

    Barka dai, ana amfani dashi don ɓoye rumbun waje? Ina neman in ɓoye rumbun kwamfutarka na waje amma abin da na gani duk yana buƙatar tsarawa. Shin akwai ɓoyayyen kebul don ubuntu wanda baya buƙatar tsara shi? na gode