Puppy Linux Discussion Forum

[gyro]

Edit:
Upgraded to "dircrypt-0.2.sfs". Added check for non empty directories in the "Setup" code.

The attached "dircrypt-0.2.sfs" contains dircrypt, a utility to manage a single encrypted directory.

For a screen shot, and information about dircrypt, please visit https://www.fishprogs.software/puppy/dircrypt/dircrypt_help.html.

Features:
Dircrypt does not encrypt a savefile, it encrypts a directory, any directory. So it can be a subdirectory of any savefie or savefolder or save partition or somewhere outside the aufs stack in /mnt/home.
As you can choose the directory you can therefore choose to include only the files that need encryption in that directory. (What's so secret about the contents of a .pet?)
Since it can be outside and savefile or savefolder, it can be accessed by many puppies.
Dircrypt is designed to work with a number of different encryption software, although in it's first version it supports only "encfs" and "gocryptfs".

Notes on using:

Dircrypt uses yad (Yet Another Dialog) to implement it's GUI. So you will need yad version > 0.26.0 installed.
Some puppies contain yad, but unfortunately some of these are yad 0.12.4. Other puppies have yad available via the Puppy Package Manager, and the ones I saw were either version 0.27.0 or 0.36.2.
The goodnews is that yad is easy to compile from soure.
To determine if you have a useable yad, type "yad --version" into a console.

To encrypt things you need encryption software, for this version of dircrypt that means encfs. Fortunately many puppies have encfs available via the PPM.
I have successfully used encfs version 1.7.4 and encfs version 1.9.1. (I compiled version 1.9.1 from source.)
Although encfs is also easy to compile from source.

An sfs containing 32 bit binaries of yad and encfs can be downloaded from https://www.fishprogs.software/puppy/dircrypt/yad_encfs_bin32-0.1.sfs.
An sfs containing 64 bit binaries of yad and encfs can be downloaded from https://www.fishprogs.software/puppy/dircrypt/yad_encfs_bin64-0.1.sfs.
A 64 bit binary of gocryptfs can be downloaded from https://github.com/rfjakob/gocryptfs/releases/download/v1.2/gocryptfs_v1.2_debian8_amd64.tar.gz.

On first run, you won't immediately get to the main screen.
The first dialog will provide an oportunity to choose the encryption software to use. It will offer both encfs or gocryptfs, but don't bother choosing gocryptfs.
The next dialog is to choose the level of encryption, if the choosen software supports it. In the "encfs" case that means choosing beteen "standard" and "paranoia", "standard" produces a 192 bit key, "paranoia" produces a 256 bit key, but may be a bit slower.
Then if encfs is found on your puppy you will see the main screen, a single column of buttons. Click on a button, to run a script to do what the button says. If you haven't browsed the help url above, then I suggest you click on the "Help" button. The "status" button is useful, as it shows you what has already been done.

Both encfs and gocryptfs require the 2 directories to be different. So you can directly access the encrypted files in the encrypted directory. To minimise this you can specify the encrypted directory as hidden e.g. "/path/to/.crypt_stuff".

Edit:
The 32bit binaries provided above were compiled on tahr 6.0.5.
The 64bit binaries provided above were compiled on tahr64 6.0.5.

The yad source is available from https://sourceforge.net/projects/yad-dialog/files/.
The encfs source is available from https://github.com/vgough/encfs/tarball/master.

gyro

[Keef]

Working ok on Slacko 6.9.6.4 using the encfs sfs.
Only issue is that when I mount the plaintext directory and click on it, I get an
"Error scanning '/mnt/home/hold': Can't stat directory: No such file or directory" dialogue box.
It does exist though, and works as expected.

Starting from terminal:

[gyro]

[mavrothal]

Did a very fast careless test and manage to wipe both the folder I was trying to encrypt and my home folder (no harm was just a test).
Caveat, you might want to add a check to make sure that the mount point is really empty. Also if mount fails, to eliminate the mount point info.
Finally you may want to add an (obvious) option to decrypt the folder.

[gyro]

[gyro]

Upgraded to "dircrypt-0.2.sfs".
Added check for non empty directories in the "Setup" code.
See first post for download.
gyro

[smokey01]

[gyro]

[smokey01]

[gyro]

"dircrypt-0.3.sfs" is available for download from https://www.fishprogs.software/puppy/dircrypt/dircrypt-0.3.sfs

For a screen shot, and information about dircrypt, please visit https://www.fishprogs.software/puppy/dircrypt/dircrypt_help.html.

This version has been updated to work with the "gocryptfs" avaiable in the Puppy Package Manager of recent upups.
And the 64bit "gocryptfs" available from https://github.com/rfjakob/gocryptfs/releases.
Of course it still supports the "encfs" found in the Puppy Package Manager of many Puppies.

This version includes, and uses, it's own copies of "yad" binaries, both 32bit and 64bit.
This is so that it will work "out of the box", even in Puppies with rather ancient versions of "yad".
Unfortunately this means that it's a lot bigger (144MiB), and hence not attached here.

To use:

1. Install "gocryptfs" or "encfs".
To use the 64bit "gocryptfs" from https://github.com/rfjakob/gocryptfs/releases,
extract the tar.gz file, and then move the "gocryptfs" binary file to "/root/my-applications/bin/".
If you can't obtain "gocryptfs" and there's no "encfs" available via your Puppy Package Manager,
then you can get a 32bit "encfs" from https://www.fishprogs.software/puppy/dircrypt/yad_encfs_bin32-0.1.sfs.

2. Download https://www.fishprogs.software/puppy/dircrypt/dircrypt-0.3.sfs and then load it as an extra sfs.

3. In the menu select "Filesystem -> Dircrypt encrypt directory".

gyro

[gyro]

As an alternative source of 32bit "encfs", download https://www.fishprogs.software/puppy/dircrypt/encfs_bin32.tar.gz.
Extract the tar.gz file, and then move the "encfs" and "encfsctl" binary files to "/root/my-applications/bin/".

gyro