Encrypt madhairekitori paGNU / Linux neCryptfs

Kana zvasvika pakuchengetedza ruzivo rwedu uye zvakavanzika, hapana kuedza kuri pamusoro, uye kunyorera dhata kunogona dzimwe nguva kutiponesa misoro yakati wandei.

Chokwadi unoziva maturusi ebasa rekunyora mafaira seGnuPG atinogona kunyorera mafaera rimwe nerimwe (rimwe basa rakareba kana tichida kunyorera nhamba yakakura yemafaira) Uye Cryptsetup yekunyora zvese zvirimo hard disk (kana mushe mushe) ichave inogoneka

Asi kana iwe uchida chishandiso chinokupa iwe chakanakisa pane iwo maviri mafomu, saka unoda eCryptfs

eCryptfs, iko kunyorera kwatinoita nemutsetse wekuraira uye watinogona kunyorera madhairekitori muGNU / Linux pa256 bits uye iyo yatinogona zvakare kugadzira kunyorera uye kududzira madhairekitori nemaoko uye otomatiki.

Ichi chishandiso chakabatanidzwa muLinux kernel kubvira vhezheni 2.6 uye ndiyo inoshandiswa patinoshandisa dhairekitori muUbuntu Imba Yakanyorwa. Chakanakira icho icho chinotipa isu nekuve mukati memukati ndechekuti inotova nekukwirisa kwakanyanya uye neizvi tinogona kutarisira kuita kwakanyanya kana tichiishandisa.

Saka kana uchizoishandisa iwe unongoda kuisa iyo package ecryptfs-utils:

$ sudo kukwira -t ecryptfs

Mushure meizvozvo, inotikumbira kuti tiise pasiwedhi yatichazoshandisa uye mimwe mibvunzo yatinogona kusiya nehunhu hwavo nekudzvanya pinda. Kana tangopedza uye isu tatoratidza madhairekitori ayo achavharidzirwa mudhairekitori rekuenda, izvi zvichaonekwawo mudhairekitori rezvinyorwa asi nezvakanyorwa kare

Izvo zviri mukati medhairekitori ndiwo mafaira akavharidzirwa usati waita rairo pagomo, uye vacharamba vakavanzwa kudzamara tashandisa rairo kuburuka uye aya ndiwo maonere atichaona iwo akadzivirirwa mafaira zvakare.

$ sudo kukwira / dir / enc

Iyi ndiyo mibvunzo inobvunzwa neCryptfs inopindirana, uye pano ndinovaunzira iwe kuti uve neruzivo rwakajeka pane zvavari:

• La chirevo kana kiyi yekunyora.
• El encryption algorithm izvo nekutadza iAES.
• Kukura kukuru, iri gumi nematanhatu nema default
• plaintext passthrough kukwanisa kusvika mafaira asina kunyorwa.
• Encrypt faira mazita, inongonyora zvemukati nekutadza.

Chimwe chinhu chinofanirwa kutariswa ndechekuti kana paine mafaera mune dhairekitori rezvinyorwa zvisina kunyorwa, kana isu tikamisikidza iyo magwaro akajeka, Tinogona kuwana aya mafaera uye zvemukati kubva kudirekitori yekuenda, asi inofanira kunge yakambomiswa sezvo yakadzimwa uye hazvingakwanise kuwana izvo zvemukati.

Zvimwechetezvo patinoshandisa iyo encryption yemazita emafaira Isu tinofanirwa kuratidza siginecha yekiyi yatichashandisa, izvi ndizvo zvakafanana zvinoshandiswa kunyora zvinyorwa, zvisinei pane dzimwe nguva patinofanira kuzvichinja. Nekushandisa chinhu ichi, mazita emafaira anenge ari mune dhairekitori rezita se "pseudo-random" tambo dzehunhu.

Patinoisa password kwekutanga, eCryptfs ichatiudza kuti iro password harina kumboshandiswa uye rinotibvunza kana tichida kuenderera mberi, kana tine chokwadi chekuti rakanyorwa nemazvo tinonyora "hongu", zvadaro tibvunze kana tichida kuchengeta siginecha yekiyi mufaira / root/.ecryptfs/sig-cache.txt kana tikazvichengeta, hazvizotibvunze iyo mibvunzo zvakare. Nekudaro, kana tikachengeta makiyi nekutaipa "hongu" asi mibvunzo yapfuura ikaonekwa zvakare, hatina kuisa kiyi nemazvo.