Do you trust Encryption?

All Gurus once were Newbies
Forum rules
There are no such things as "stupid" questions. However if you think your question is a bit stupid, then this is the right place for you to post it. Please stick to easy to-the-point questions that you feel people can answer fast. For long and complicated questions prefer the other forums within the support section.
Before you post please read how to get help
Post Reply
User avatar
AZgl1500
Level 9
Level 9
Posts: 2860
Joined: Thu Dec 31, 2015 3:20 am
Location: Oklahoma where the wind comes sweeping down the plains
Contact:

Do you trust Encryption?

Post by AZgl1500 » Thu Jan 04, 2018 6:07 pm

I have steered clear of encrypting anything that is extremely important to me.

I have been scared to death to totally devote all of my important data to an encrypted volume, and then not have a copy of it stored some where "in the open".... which would inherently negate the idea of using encryption in the first place.

I just read an article about VeraCrypt and how it would make it easier for the neophyte to learn to use encryption. But still, what if I forgot the password to the encrypted volume?

https://www.techrepublic.com/article/ho ... d=23006433


any hints on getting me past this bit of distrust with encryption?

and secondly, just how trust-worthy is encrypted data?

and 3rd, does Linux Mint already provide for encryption, and VeraCrypt would just be something that I don't really need? What drew me towards VeraCrypt is that I use Windows, Android and Linux Mint daily and could need access to the data from any of the 3 OS types.

Cosmo.
Level 23
Level 23
Posts: 17824
Joined: Sat Dec 06, 2014 7:34 am

Re: Do you trust Encryption?

Post by Cosmo. » Thu Jan 04, 2018 6:16 pm

If you forget the password, than you can forget your encrypted data. Perhaps except in the case, that you use a weak password, but in this case you can forget encryption.

Store backups on a locally attached external drive, not "in the open". Then they are safe.

User avatar
MintBean
Level 9
Level 9
Posts: 2968
Joined: Fri Aug 07, 2015 6:54 am
Location: Blighty

Re: Do you trust Encryption?

Post by MintBean » Thu Jan 04, 2018 6:19 pm

People who encrypt the entire OS seem to get into more trouble. Just have an encrypted data partition and only store there what needs to be encrypted. Having done some research and played with it, Veracrypt is the one I always recommend.

User avatar
WharfRat
Level 20
Level 20
Posts: 11826
Joined: Thu Apr 07, 2011 8:15 pm

Re: Do you trust Encryption?

Post by WharfRat » Thu Jan 04, 2018 6:24 pm

I've been using apt show encfs

Another option is LUKS.

I would stick with native repo apps rather than VeraCrypt.

And as Cosmo. said forget your password and you can forget your data :(
ImageImage

Mute Ant
Level 13
Level 13
Posts: 4941
Joined: Tue Sep 03, 2013 7:45 pm
Location: Norfolk UK

Re: Do you trust Encryption?

Post by Mute Ant » Thu Jan 04, 2018 7:14 pm

"Do you trust Encryption?" Yes, all the way. Encryption scrambles everything beyond hope of recovery without a valid password... no password, no data... that's the whole point really.

LUKS is very easy to set up on a removable drive... the Disks accessory even offers 'Ext4 on LUKS' as one of the formatting options. I got that far and have not used anything else. Mint's File Manager recognises a LUKS when you plug it in, it's all point-and-click. Unless you make an explicit effort to copy something into plain-text, the files stay encrypted as you use them, in the LUKS container. Pull the USB stick and it's all in there, nothing in the machine.

It's not difficult to recognise an encrypted sequence of numbers by the lack of pattern. If you have a special need to hide the fact that you have hidden something, encryption alone won't do it.

Open-source is important too, to allow everyone to see how it works. That doesn't have to be 'free' or 'libre', just open source.
Tommy reports the scan of zircon and opal storage is complete. When shall we go today?

User avatar
AZgl1500
Level 9
Level 9
Posts: 2860
Joined: Thu Dec 31, 2015 3:20 am
Location: Oklahoma where the wind comes sweeping down the plains
Contact:

Re: Do you trust Encryption?

Post by AZgl1500 » Fri Jan 05, 2018 1:54 am

Cosmo. wrote:If you forget the password, than you can forget your encrypted data. Perhaps except in the case, that you use a weak password, but in this case you can forget encryption.

Store backups on a locally attached external drive, not "in the open". Then they are safe.

This is what I do now, I have a 1 TB external USB HD and use 'AlwaySync' to keep pertinent folders backed up. It is "always on".
That drive is not accessible from the web, nor is my OS..... assuming I don't get hacked... :evil:


So far, after nearly 3 decades of using these things we call computers, I have always managed to keep my data safe from loss. In fact, just tonight, someone needed something from 10 years ago, and I found it on a 3.5" 160 mB hard drive.... I have 3 of those things with data from many years back.

Just ordered up a new 6 TB HDD and it will become my offline backup for images, and permanent data.
It will only be plugged in to make full complete images of my C:\ drive on my Win7 PC.... that is where all of my data resides....

but, I am learning with 18.3 Cinnamon to like Mint a lot.... this LinuxMint 18.3 Cinnamon laptop is becoming my favorite way to surf the internet.

I think I will get a new 16 gB Flash drive stick, and experiment with that for my encryption endeavors.

Thanks to all for your comments. and if there are more ideas, please present them too.

User avatar
pbear
Level 5
Level 5
Posts: 598
Joined: Wed Jun 21, 2017 12:25 pm
Location: San Francisco

Re: Do you trust Encryption?

Post by pbear » Fri Jan 05, 2018 2:31 am

AZgl1500 wrote:What drew me towards VeraCrypt is that I use Windows, Android and Linux Mint daily and could need access to the data from any of the 3 OS types.
I use TrueCrypt, from which VeraCrypt was derived, for this reason. (If I were starting fresh, I'd probably use VeraCrypt.) Two issues of which to be aware. First, bear in mind encrypted data has to be backed up the same as all other data. I do that by using two flash drives, both encrypted, which I mirror against each other. You also could use an internal partition and an external backup. Second, the most vulnerable aspect of container encryption is the header, which like all read-writes can become corrupted. There's a tool for backing up the header.
Time flies like an arrow. Fruit flies like a banana.
Running Mate 18.3 64 bit (by upgrade from 18.1-2)

Mildly_odd
Level 1
Level 1
Posts: 30
Joined: Sun Nov 13, 2016 8:40 am

Re: Do you trust Encryption?

Post by Mildly_odd » Thu May 17, 2018 6:51 am

How do I actually get hold of LUKS or Veracrypt? Are they available in any repositories approved by linux Mint?

User avatar
AndyMH
Level 5
Level 5
Posts: 845
Joined: Fri Mar 04, 2016 5:23 pm
Location: Wiltshire

Re: Do you trust Encryption?

Post by AndyMH » Thu May 17, 2018 7:34 am

For veracrypt, in a terminal:

Code: Select all

sudo add-apt-repository ppa:unit193/encryption
sudo apt update
sudo apt install veracrypt
For LUKS, you don't need anything, it's built into mint. You can select LUKS+Ext4 as a format option in disks.
Homebrew i5-8400+GTX1080 Cinnamon 19, Thinkpad T430 i7-3632 Cinnamon 19, Thinkpad T420 Cinnamon 18.3, Thinkpad T410 Cinnamon 17.3, Thinkpad T60 19.0 Mate

Hoser Rob
Level 12
Level 12
Posts: 4456
Joined: Sat Dec 15, 2012 8:57 am

Re: Do you trust Encryption?

Post by Hoser Rob » Thu May 17, 2018 9:11 am

Mildly_odd wrote:
Thu May 17, 2018 6:51 am
How do I actually get hold of LUKS or Veracrypt? Are they available in any repositories approved by linux Mint?
If you want to find 'approved' by Mint all you have to do is look in Synaptic. Unless you added a ppa for it, it's been tested. Nothing else is officially supported.

User avatar
Faust
Level 4
Level 4
Posts: 438
Joined: Thu Jul 14, 2016 3:40 am

Re: Do you trust Encryption?

Post by Faust » Thu May 17, 2018 9:27 am

Yes , I trust encryption ( to varying degrees , depending on whose implementation it is )
pbear wrote:
Fri Jan 05, 2018 2:31 am
I use TrueCrypt, from which VeraCrypt was derived, for this reason. (If I were starting fresh, I'd probably use VeraCrypt.) .........
I strongly urge anyone with any sensitive date encrypted using TrueCrypt to decrypt it right now , and re-encrypt with VeraCrypt .

There is a big dark question mark over what happened when TrueCrypt suddenly went " quiet " .
It happened at around the same time that Lavasoft pulled the plug , and probably for similar reasons .

I'm not including links , but a quick search will give plenty to read about .
" And so it goes " - Kurt Vonnegut
The modern reality and the satirical parody are rapidly converging .

User avatar
lsemmens
Level 6
Level 6
Posts: 1218
Joined: Wed Sep 10, 2014 9:07 pm
Location: Rural South Australia

Re: Do you trust Encryption?

Post by lsemmens » Thu May 17, 2018 9:32 am

Out of curiosity, is Truecrypt/Veracrypt any more secure than LUKs? I have read about the Truecrypt issue and the response by Gibson Research to it. Although it is no longer under development, it appears that it is still secure. Veracrypt to my understanding has not been audited like TC so may, or may not, be as good, or better.
Kernel: 4.15.0-36-generic x86_64 bits: 64
Desktop: Cinnamon 3.8.9
Distro: Linux Mint 19 Tara

Laptop T4500 Dualcore 4Gb RAM
Server AMD Phenom 9650 - GEForce 9400GT 6Gb RAM
+ three other Linux Mint machines
Out of my mind - please leave a message

User avatar
absque fenestris
Level 5
Level 5
Posts: 653
Joined: Sat Nov 12, 2016 8:42 pm
Location: Confoederatio Helvetica

Re: Do you trust Encryption?

Post by absque fenestris » Thu May 17, 2018 9:37 am

Faust wrote:
Thu May 17, 2018 9:27 am
...
There is a big dark question mark over what happened when TrueCrypt suddenly went " quiet " .
It happened at around the same time that Lavasoft pulled the plug , and probably for similar reasons .
...
It really looked like force majeure back then.
Linux Mint 18.3 Sylvia (Mate) 32-bit - Acer D250 Netbook (Intel Atom N270, 2 GB RAM, 120 GB SSD)

User avatar
phd21
Level 17
Level 17
Posts: 7468
Joined: Thu Jan 09, 2014 9:42 pm
Location: Florida

Re: Do you trust Encryption?

Post by phd21 » Thu May 17, 2018 11:21 am

Hi AZgl1500,

This is your second post on encryption?

Yes, encryption is safe and a smart thing to use, especially if you have sensitive data to protect. But you must remember your encryption password and using a password manager is also a very smart thing to do like "KeePassXC". TIp 1: Every so often, you can export your passwords from a Password Manager like KeePassXC to a text file and create an encrypted archive file of that text file which is handy when you are not around a computer with KeePassXC installed. Tip 2: Create a USB stick with Linux Mint on it with an encrypted home folder and with KeePassXC installed (portable Linux Mint system).


Previous post with good information
Encrypting Files Question - Linux Mint Forums
viewtopic.php?f=47&t=267379&hilit=cryfs


Hope this helps ...
Phd21: Mint KDE 17.3 & 18.3, 64-bit Awesome OS, Ancient Dell OptiPlex 780 Core2Duo E8400 3GHz,4gb Ram,256gb SDD, Video: Intel 4 Graphics, DVD Lightscribe. Why I use KDE?:https://opensource.com/life/15/4/9-reasons-to-use-kde

User avatar
GS3
Level 4
Level 4
Posts: 462
Joined: Fri Jan 06, 2017 7:51 am

Re: Do you trust Encryption?

Post by GS3 » Thu May 17, 2018 6:31 pm

Faust wrote:
Thu May 17, 2018 9:27 am
I strongly urge anyone with any sensitive date encrypted using TrueCrypt to decrypt it right now , and re-encrypt with VeraCrypt .

There is a big dark question mark over what happened when TrueCrypt suddenly went " quiet " .
It happened at around the same time that Lavasoft pulled the plug , and probably for similar reasons .
I think the consensus is that the reasons involved the US Government and gag orders and also that Truecrypt's last version before this is still safe as it is open source and has been reviewed.

My opinion is that for personal use it is safe and if you are afraid of the government then this XKCD applies.

Personally I have been using PGP since it came out like twenty years ago. I find it convenient to use and it is not tied to an OS or installation. I can copy my encrypted files for backups and can read them with the appropriate key on another computer.
HP Compaq Elite 8300 CMT - Linux Mint 18.2 Sonya - Kernel 4.4.0-138-generic X64 - Cinnamon 3.4.4 - Nemo

User avatar
absque fenestris
Level 5
Level 5
Posts: 653
Joined: Sat Nov 12, 2016 8:42 pm
Location: Confoederatio Helvetica

Re: Do you trust Encryption?

Post by absque fenestris » Thu May 17, 2018 7:23 pm

Bad thoughts, system independent:
Never thought is never stored - so not thinking is the safest way not to be monitored - the Cartesian imperative "I think, so I am" is transformed into "I don't think - and certainly not voluntarily" and we are in the brave new world. No encryption required.
Linux Mint 18.3 Sylvia (Mate) 32-bit - Acer D250 Netbook (Intel Atom N270, 2 GB RAM, 120 GB SSD)

Post Reply

Return to “Newbie Questions”