[aklug] Re: Rsyncrypto?

Encfs.

You can rsync the encfs directory to another box, and then mount it, or
rsync it to another box, and decrypt it, and of course, you need to know
the password, first.

 Adam

Christopher Howard wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Royce Williams wrote:
>
>> Christopher Howard said, on 02/06/2010 05:19 PM:
>>
>>> Hey, any of you guys worked with rsyncrypto? Looks convenient, but I'm a
>>> little suspicious because I don't see it in my software tree.
>>>
>> If I understand correctly, this is the salient idea:
>>
>> http://rsyncrypto.lingnu.com/index.php/Home_Page#What_is_Rsyncrypto
>>
>> "This modification ensures that two almost identical files, such as the
>> same file before an after a change, when encrypted using rsyncrypto and
>> the same key, will produce almost identical encrypted files."
>>
>>
>> Check my math here, but isn't that part of the point of good encryption
>> schemes -- to make small changes look totally different? If two
>> almost-the-same files produce two almost-the-same encrypted files, that
>> smells like a significant attack vector to me. (Just my first knee-jerk
>> reaction).
>>
>>
>> Royce
>> ---------
>> To unsubscribe, send email to <aklug-request@aklug.org>
>> with 'unsubscribe' in the message body.
>>
>>
>
> Hmm... anyone have any suggestions then for an alternative method, if
> you want to sync files remotely to an untrusted server? (for backup
> purposes).
>
> I was thinking about getting some backup space through evbackup.com, as
> the prices seem decent and they support ssh, rsync, and so forth, but of
> course I don't actually trust them to not look at the personal data I am
> backing up.
>
> - --
> Christopher Howard
> http://indicium.us
> http://theologia.indicium.us
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.11 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iEYEARECAAYFAktuRV8ACgkQQ5FLNdi0BcVNngCeO4b6bH0kyOWbC1JxCx+e6i7+
> dqQAnj3To96mo2Z729lqTvLTwNWzTuOR
> =3S+Y
> -----END PGP SIGNATURE-----
> ---------
> To unsubscribe, send email to <aklug-request@aklug.org>
> with 'unsubscribe' in the message body.
>
>

---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Sat Feb 6 19:50:54 2010