2

I need filesystem level encryption with the following features:

  1. directory encryption.
  2. being fast.
  3. being based on passphrase.
  4. has less overhead.
  5. only the user who decrypt it can access and see the directory. EncFS has this ability, but it mounts another directory and it has disadvantage of limiting full path size.

What's your suggestion?

1 Answer 1

2

only the user who decrypt it can access and see the directory.

My initial answer was wrong, since ZFS and probably other file-level decryption technologies does indeed decrypt for all users with access once the passkey is loaded.

To encrypt and decrypt exclusively for the current user, you have to use user-space encryption like EncFS.

For Ubuntu, I would recommend you also take a look at SecureFS, which is a FUSE (filesystem-in-userspace) with native encryption.

3
  • The problem is that when I enter the passphrase, the data gets unlocked for all users, not only me.
    – hamidi
    Apr 15 at 15:28
  • It seems I was wrong - file-level encryption (including ZFS) does indeed decrypt for all users with access, once the passkey is loaded. It seems you need to use user-space encryption (like EncFS) in these situations. Apr 17 at 14:05
  • Although it's an import from Windows, NTFS has this ability at file system level. You may encrypt a file or folder in a file system which others have access too, but they can't view your file's content. They may do so too. But they still may know the file's name. In Linux, specially with ZFS I need this capability. If not with ZFS, please introduce some Linux file system with this support. Thank you.
    – hamidi
    Apr 17 at 15:12

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .