4 ms·
Rclone also has great encryption feature¹ which allows you to add a crypto layer to all of the cloud storage options in order to relatively easily hide all file
by iod 7y ago
Rclone also has great encryption feature¹ which allows you to add a crypto layer to all of the cloud storage options in order to relatively easily hide all file names and contents. With it's cross platform capabilities it means you can have a unified secure storage across operating systems and secure it from the underlying storage provider as well as over the wire.
¹ https://rclone.org/crypt https://rclone.org/crypt
- otherjason 7y agoThis is a great feature. The one drawback that I've been able to come up with it is that the password can't be changed after the fact, meaning that I can't rotate credentials without creating a new remote and copying all of the data over. Does anyone know of a workaround for this?
- StavrosK 7y agoUnfortunately not on the user level, but on the software level, it should generate a random 128-bit (or whatever) key, store that on the server and encrypt it with your KDF-strengthened password. That way, you can change the password by just re-encrypting that file, though you can't do much in case the attacker got that decrypted key. You'd have to re-upload all the data for that.
- steerablesafe 7y agoIt looks a bit more metadata-leaky than cryfs[1]. [1] https://www.cryfs.org/ https://www.cryfs.org/
- ubercow13 7y agoAlso gocryptfs, which is a tiny bit more leaky but apparently much more performant and a bit more featureful https://nuetzlich.net/gocryptfs/comparison/ https://nuetzlich.net/gocryptfs/comparison/