Encrypting save.dat

[maverick]

Any recommendations on the best way to do this? I understand Porteus has had some issues with encryption in the past, but what's the current status? If not supported, do you guys think it would be possible to place the save.dat file in a Truecrypt container on the USB drive, then prompt the user for the password during startup (after the Truecrypt module loads), and mount it before KDE is booted? Thanks

[Hamza]

This website may help you..
http://alien.slackbook.org/dokuwiki/dok ... cryptoloop

[fanthom]

@maverick
encrypting save.dat requires changes to initrd and liuxrc which is not easy.
i would recommend you using truecrypt for encrypting specific folders or encfs (both in 64bit repo).

[maverick]

Thanks fanthom, I will probably follow your suggestion and use Truecrypt containers for specific folders for the time being . However, please treat this as a feature request and consider adding a simple way to create an encrypted save.dat container in the future (maybe you could check how Puppy Linux does it?) This would be particularly useful for things like browser history and saved forms, personalized KDE widgets (such as notes and stock portfolios), recent documents, wireless passwords, etc which would be awkward and difficult to integrate with the file system if encrypted as separate Truecrypt containers and dangerous to keep unencrypted on a USB flash drive

[fanthom]

yes - encrypting save.dat sounds better than encrypting whole porteus installation (like it was before) so probably i'll try that now (or maybe i'll do both?)
added to my TODO list for porteus-2.0.
will look at puppy - thanks.

[brokenman]

I like the idea of an encrypted .dat file. We must also consider that one may not be using a save.dat file as in the case of saving changes to non-fat partition. These users may also like somewhere to lock down important stuff.

What about folder called 'vault' in the Porteus folder (or user choice) that could be encrypted on shutdown and decrypted at boot time (before magic-folders are bound). This could be a good place to store magic-folders and other important documents with sensitive info. Just something to think about.