4 ms·
depends on the file system. some encrypt at the individual file level. I believe ecryptfs falls into this category.
by compsciphd 9y ago
depends on the file system. some encrypt at the individual file level. I believe ecryptfs falls into this category.
- StavrosK 9y agoIt does, yes, but it's also not secure if an adversary has two versions of a file (they can partially decrypt it, I believe).
- lvh 9y agoI believe you're talking about encfs, not ecryptfs. The specific vulnerability is in the bizarro last-block encryption that encfs 1.x uses; see: https://defuse.ca/audits/encfs.htm https://defuse.ca/audits/encfs.htm I use FileVault 2 with Yubikey 4-backed GPG for sensitive files. (Turn disk encryption on, but don't count on it to keep your files secret in a lot of threat models.)
- StavrosK 9y agoOops, sorry, yes! I did mean encfs.