3 ms·
> On modern operating systems you can generally mount and unmount virtual encrypted volumes that are open (ideally) only when you're actually using them to do w
by Fnoord 7y ago
> On modern operating systems you can generally mount and unmount virtual encrypted volumes that are open (ideally) only when you're actually using them to do work with their contents. There used to be a great macOS tool, called Knox, that did this graphically.
Cryptomator [1], cross-platform as well.
[1] https://cryptomator.org/ https://cryptomator.org/
- tptacek 7y agoThe nice thing about Knox is that it just wrapped macOS's built in XTS support. XTS sucks, but you didn't have to think much about what Knox itself was doing. Cryptomator implemented their own FUSE filesystem, and it's a strange collection of SIV, CTR, HMAC, and scrypt. I should like it a lot because I generally like filesystem encryption, but I'd have to actually read it carefully before using it. There's a Cure53 "audit" of it, like for everything else, but to give a sense of how reliable it was, they flagged ECB mode... in the project's implementation of SIV mode.