Encrypted Filespace with EncFS - Revision history

Ramuk: /* Install the FUSE module */ use last known working archive version instead of 2.7.2

Ramuk — Wed, 01 Apr 2009 04:51:14 GMT

Install the FUSE module: use last known working archive version instead of 2.7.2

← Older revision		Revision as of 04:51, 1 April 2009
Line 29:		Line 29:
	</ref>:		</ref>:

-	wget http://hvkls.dyndns.org/downloads/fuse_2.7.2-binaries-ppc.tar.gz	+	wget http://hvkls.dyndns.org/downloads/archive/fuse_2.6.0-binaries-ppc.tar.gz
	tar -C / -xvzf fuse*.tar.gz		tar -C / -xvzf fuse*.tar.gz

Ramuk: /* Install Armel Debian and FUSE module */

Ramuk — Mon, 23 Mar 2009 01:28:54 GMT

Install Armel Debian and FUSE module

← Older revision		Revision as of 01:28, 23 March 2009
Line 19:		Line 19:

	===Install Armel Debian and FUSE module===		===Install Armel Debian and FUSE module===
-	Install [[Armel Debian for the Kurobox Pro - Manual install]] and custom kernel and modules contained in those instructions	+	Install [[Armel Debian for the Kurobox Pro - Manual install]] or [http://forum.buffalo.nas-central.org/viewtopic.php?f=18&t=5736&p=72241&#p72241 Armel for a LSPro] and custom kernel and modules contained in those instructions

	===Install EncFS===		===Install EncFS===

Ramuk: /* Install Freelink and FUSE module */

Ramuk — Mon, 23 Mar 2009 01:27:16 GMT

Install Freelink and FUSE module

← Older revision		Revision as of 01:27, 23 March 2009
Line 18:		Line 18:
	== Method (ARM9 KuroBox Pro)==		== Method (ARM9 KuroBox Pro)==

-	===Install ~~Freelink~~ and FUSE module===	+	===Install Armel Debian and FUSE module===
-	Install [[~~FreeLink~~ for the Kurobox Pro - Manual install]] and custom kernel and modules contained in those instructions	+	Install [[Armel Debian for the Kurobox Pro - Manual install]] and custom kernel and modules contained in those instructions

	===Install EncFS===		===Install EncFS===

Ramuk: /* What's the point? */

Ramuk — Fri, 21 Mar 2008 15:58:05 GMT

What's the point?

← Older revision		Revision as of 15:58, 21 March 2008
Line 63:		Line 63:

	== What's the point? ==		== What's the point? ==
-	{{Postit\|Slow to Write\|I've been using this solution for awhile now, it's slow to ENcode data but faster to DEcode data. So that saving (ENcoding) a file ~~over 50MB~~ to an encrypted share over samba can be somewhat ~~buggy~~. ~~So I save files~~ to an unencrypted share ~~and then move them over to the encrypted filespace from the command line~~. ~~Reading (DEcoding) the files works fine for me for files that are even 1-2GB in size~~ - [[User:Ramuk\|Ramuk]] 22:44, ~~15 August 2006~~ (~~EDT~~)}}	+	{{Postit\|Slow to Write\|I've been using this solution for awhile now, it's slow to ENcode data but faster to DEcode data. So that saving (ENcoding) a file to an encrypted share over samba can be somewhat slow. Writing a new file to a samba share that is an EncFS volume happens for me at about 1.7 MB/s and to an unencrypted share at 5 MB/s. - [[User:Ramuk\|Ramuk]] 10:58, 21 March 2008 (CDT) }}
		+
	What's the point of all this? Well you can create an encrypted file space that once mounted functions completely transparently as a shared directory. Once it is unmounted, either manually or automatically (when the system is shut down) the data will only exist in an encrypted form in the encrypted directory you specified. In this example in <tt>/mnt/locked</tt> , if your linkstation is stolen or lost, as soon as it is unplugged the data will no longer be accessible without the password. Even if someone cracks open the device and takes the hard drive out all they will be able to get is encrypted gibberish in that directory. ''However'' they would be able to figure out how MANY files you had in that directory and the SIZE of each file, as EncFS encypts each file individually, not the block device.		What's the point of all this? Well you can create an encrypted file space that once mounted functions completely transparently as a shared directory. Once it is unmounted, either manually or automatically (when the system is shut down) the data will only exist in an encrypted form in the encrypted directory you specified. In this example in <tt>/mnt/locked</tt> , if your linkstation is stolen or lost, as soon as it is unplugged the data will no longer be accessible without the password. Even if someone cracks open the device and takes the hard drive out all they will be able to get is encrypted gibberish in that directory. ''However'' they would be able to figure out how MANY files you had in that directory and the SIZE of each file, as EncFS encypts each file individually, not the block device.

Ramuk: /* Install Freelink and FUSE module */

Ramuk — Fri, 15 Feb 2008 00:35:41 GMT

Install Freelink and FUSE module

← Older revision		Revision as of 00:35, 15 February 2008
Line 19:		Line 19:

	===Install Freelink and FUSE module===		===Install Freelink and FUSE module===
-	Install [[FreeLink for the Kurobox Pro - Manual install]] and ~~the 2.6.16.57~~ kernel and modules contained in those instructions	+	Install [[FreeLink for the Kurobox Pro - Manual install]] and custom kernel and modules contained in those instructions

	===Install EncFS===		===Install EncFS===

Ramuk at 23:46, 14 February 2008

Ramuk — Thu, 14 Feb 2008 23:46:39 GMT

← Older revision		Revision as of 23:46, 14 February 2008
Line 2:		Line 2:
	This article based on work done by Ramuk and Andre on Linkstationwiki.org		This article based on work done by Ramuk and Andre on Linkstationwiki.org
	</small></font>''<br>		</small></font>''<br>
-	[[Image:Warded_locked.png\|frame\|'''<font color =red>PowerPC ~~Only~~ and ARM9 (KuroBox Pro)</font>''' : This method only works for the powerpc-hdhlan and powerpc-hdhglan LinkStations, and the KuroBox Pro]]	+	[[Image:Warded_locked.png\|frame\|'''<font color =red>PowerPC and ARM9 (KuroBox Pro)</font>''' : This method only works for the powerpc-hdhlan and powerpc-hdhglan LinkStations, and the KuroBox Pro]]
	== Abstract ==		== Abstract ==
	This article is for people that want to add an encrypted filespace to their Link Station<ref>{{Forumpost\|41\|818\|The Linkstation Community Forum / Linkstation HG (ppc) / Encrypted Partitions, and Installing modules (FUSE)}}</ref>. We will use the powerpc-hdhglan Link Station for our example.		This article is for people that want to add an encrypted filespace to their Link Station<ref>{{Forumpost\|41\|818\|The Linkstation Community Forum / Linkstation HG (ppc) / Encrypted Partitions, and Installing modules (FUSE)}}</ref>. We will use the powerpc-hdhglan Link Station for our example.

Ramuk at 23:45, 14 February 2008

Ramuk — Thu, 14 Feb 2008 23:45:59 GMT

← Older revision		Revision as of 23:45, 14 February 2008
Line 6:		Line 6:
	This article is for people that want to add an encrypted filespace to their Link Station<ref>{{Forumpost\|41\|818\|The Linkstation Community Forum / Linkstation HG (ppc) / Encrypted Partitions, and Installing modules (FUSE)}}</ref>. We will use the powerpc-hdhglan Link Station for our example.		This article is for people that want to add an encrypted filespace to their Link Station<ref>{{Forumpost\|41\|818\|The Linkstation Community Forum / Linkstation HG (ppc) / Encrypted Partitions, and Installing modules (FUSE)}}</ref>. We will use the powerpc-hdhglan Link Station for our example.
	[[w:EncFS\|EncFS]]<ref>The EncFS Wiki: [http://arg0.net/wiki/encfs http://arg0.net/wiki/encfs]</ref> is used to do this. This probably will work on any PPC link station. It may work on a MIPS Link station		[[w:EncFS\|EncFS]]<ref>The EncFS Wiki: [http://arg0.net/wiki/encfs http://arg0.net/wiki/encfs]</ref> is used to do this. This probably will work on any PPC link station. It may work on a MIPS Link station
-	but you'll have to compile the [[w:FUSE_%28linux%29\|FUSE]]<ref>The FUSE Wikipedia Page: [[w:FUSE_%28linux%29\|FUSE:Wikipedia]]</ref> module yourself somehow. It will also work on a manually Freelinked [[:Category:KuroboxPro\|KuroBox Pro]]	+	but you'll have to compile the [[w:FUSE_%28linux%29\|FUSE]]<ref>The FUSE Wikipedia Page: [[w:FUSE_%28linux%29\|FUSE:Wikipedia]]</ref> module yourself somehow. It will also work on a manually Freelinked [[:Category:KuroboxPro\|KuroBox Pro]] (ARM9)

	{{Postit\|Encryption Type\|EncFS was chosen because of it's relative ease and speed of use. Loop-AES could be used as well<ref>Comparison of various Encryption Schemes: [http://www.linux.com/article.pl?sid=06/03/13/1656228 Encrypt filesystems with EncFS and Loop-AES]		{{Postit\|Encryption Type\|EncFS was chosen because of it's relative ease and speed of use. Loop-AES could be used as well<ref>Comparison of various Encryption Schemes: [http://www.linux.com/article.pl?sid=06/03/13/1656228 Encrypt filesystems with EncFS and Loop-AES]
Line 13:		Line 13:
	== Prerequisites ==		== Prerequisites ==
	This article assumes that you have installed [[FreeLink]] or [[OpenLink]].		This article assumes that you have installed [[FreeLink]] or [[OpenLink]].
-	You also will need to upgrade to a 2.6 Kernel~~. Use~~ these instructions: [[Upgrade to the 2.6-kernel (ppc only)]]	+	You also will need to upgrade to a 2.6 Kernel on a PPC Box, use these instructions: [[Upgrade to the 2.6-kernel (ppc only)]]. Or on an ARM9 box you will need a custom kernel and modules.

Ramuk: /* Install Freelink and FUSE module */

Ramuk — Thu, 14 Feb 2008 23:24:52 GMT

Install Freelink and FUSE module

← Older revision		Revision as of 23:24, 14 February 2008
Line 19:		Line 19:

	===Install Freelink and FUSE module===		===Install Freelink and FUSE module===
-	Install [[FreeLink for the Kurobox Pro - Manual install]] and the 2.6.16.57 kernel contained in those instructions	+	Install [[FreeLink for the Kurobox Pro - Manual install]] and the 2.6.16.57 kernel and modules contained in those instructions
		+
	===Install EncFS===		===Install EncFS===
	apt-get install encfs		apt-get install encfs

Ramuk: /* Create an encrypted partition */

Ramuk — Thu, 14 Feb 2008 23:24:28 GMT

Create an encrypted partition

← Older revision		Revision as of 23:24, 14 February 2008
Line 42:		Line 42:
	wget http://downloads.nas-central.org/ALL_LS_KB_PPC/Packages/encfs-1.3.1_ppc.tar.gz		wget http://downloads.nas-central.org/ALL_LS_KB_PPC/Packages/encfs-1.3.1_ppc.tar.gz
	tar -C / xzvf encfs-1.3.1_ppc.tar.gz		tar -C / xzvf encfs-1.3.1_ppc.tar.gz
		+
		+	==Post Install Usage==

	===Create an encrypted partition===		===Create an encrypted partition===
Line 47:		Line 49:
	encfs /mnt/locked /mnt/share/locked -- -o allow_other		encfs /mnt/locked /mnt/share/locked -- -o allow_other
	<tt>/mnt/share</tt> here is a shared directory. <tt>/mnt/locked</tt> is where the encrypted bits will be stored and <tt>/mnt/share/locked</tt> is where the (de)crypted space will be mounted to. You will be prompted for the type of encryption that you want and for password creation. Look [http://arg0.net/wiki/encfs/intro2#examples here] for more details on using EncFS.		<tt>/mnt/share</tt> here is a shared directory. <tt>/mnt/locked</tt> is where the encrypted bits will be stored and <tt>/mnt/share/locked</tt> is where the (de)crypted space will be mounted to. You will be prompted for the type of encryption that you want and for password creation. Look [http://arg0.net/wiki/encfs/intro2#examples here] for more details on using EncFS.
		+
	===Access Permissions===		===Access Permissions===
	* You will have to chmod the created directory so everyone can access it		* You will have to chmod the created directory so everyone can access it

Ramuk at 23:23, 14 February 2008

Ramuk — Thu, 14 Feb 2008 23:23:54 GMT

← Older revision		Revision as of 23:23, 14 February 2008
Line 15:		Line 15:
	You also will need to upgrade to a 2.6 Kernel. Use these instructions: [[Upgrade to the 2.6-kernel (ppc only)]]		You also will need to upgrade to a 2.6 Kernel. Use these instructions: [[Upgrade to the 2.6-kernel (ppc only)]]

-	== Method ==	+
		+	== Method (ARM9 KuroBox Pro)==
		+
		+	===Install Freelink and FUSE module===
		+	Install [[FreeLink for the Kurobox Pro - Manual install]] and the 2.6.16.57 kernel contained in those instructions
		+	===Install EncFS===
		+	apt-get install encfs
		+	== Method (PPC)==
	===Install the FUSE module===		===Install the FUSE module===
	* I used the binaries<ref>André's documentation on the FUSE binary: [http://hvkls.dyndns.org/downloads/documentation/README-fuse.html http://hvkls.dyndns.org/downloads/documentation/README-fuse.html]		* I used the binaries<ref>André's documentation on the FUSE binary: [http://hvkls.dyndns.org/downloads/documentation/README-fuse.html http://hvkls.dyndns.org/downloads/documentation/README-fuse.html]
Line 30:		Line 37:
	=====PowerPC=====		=====PowerPC=====
	apt-get install encfs		apt-get install encfs
-
-	~~=====ARM (KuroboxPro)=====~~
-	~~Install [[FreeLink for the Kurobox Pro - Manual install]] and the 2.6.16.57 kernel contained in those instructions~~
-	~~apt-get install encfs~~
-
	====OpenLink====		====OpenLink====
	wget http://downloads.nas-central.org/ALL_LS_KB_PPC/Packages/rlog-1.3.7_ppc.tar.gz		wget http://downloads.nas-central.org/ALL_LS_KB_PPC/Packages/rlog-1.3.7_ppc.tar.gz