{"thread":{"id":"18823","subject":"[FR] Encrypting the repository","startedAt":"2009-04-10T08:49:26Z","lastAt":"2009-04-11T02:03:58Z","messageCount":8,"participants":["Aaron Digulla","Francis Galiegue","Geoffrey Lee","Sverre Rabbelier","Nicolas Pitre"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"110997","messageId":"loom.20090410T084314-918@post.gmane.org","threadId":"18823","inReplyTo":null,"subject":"[FR] Encrypting the repository","fromName":"Aaron Digulla","fromEmail":"digulla@hepe.com","sentAt":"2009-04-10T08:49:26Z","receivedAt":"2009-04-10T08:49:26Z","isPatch":false,"sender":{"key":"digulla@hepe.com","avatar":"https://gravatar.com/avatar/5d92aac0fd9bc45104985658d330bbf1bba4363685d16c4cbd70b9ddd19eb01e?d=mp&s=160"},"body":"Hello,\n\nI need a way to safely synchronize data between several places using an unsafe\nstorage (USB stick, Internet drive). So my question is: How much work would it\nbe to patch GIT to encrypt all files in the repository using AES-256?\n\nI'm aware that this leaves an issue unresolved (where should I store the\npassword so that GIT doesn't have to ask for it all the time?) but one step at a\ntime, please :)\n\nRegards,\n\n-- \nAaron \"Optimizer\" Digulla\n"},{"id":"110998","messageId":"200904101114.07385.fge@one2team.com","threadId":"18823","inReplyTo":"loom.20090410T084314-918@post.gmane.org","subject":"Re: [FR] Encrypting the repository","fromName":"Francis Galiegue","fromEmail":"fge@one2team.com","sentAt":"2009-04-10T09:14:07Z","receivedAt":"2009-04-10T09:14:07Z","isPatch":false,"sender":{"key":"fge@one2team.com","avatar":null},"body":"Le vendredi 10 avril 2009, vous avez écrit :\n> Hello,\n> \n> I need a way to safely synchronize data between several places using an \nunsafe\n> storage (USB stick, Internet drive). So my question is: How much work would \nit\n> be to patch GIT to encrypt all files in the repository using AES-256?\n> \n> I'm aware that this leaves an issue unresolved (where should I store the\n> password so that GIT doesn't have to ask for it all the time?) but one step \nat a\n> time, please :)\n> \n> Regards,\n> \n\nWhy don't you just create an archive and encrypt that archive, instead of \nencrypting every file?\n\nAlso, what are the target systems?\n\n-- \nFrancis Galiegue\nONE2TEAM\nIngénieur système\nMob : +33 (0) 683 877 875\nTel : +33 (0) 178 945 552\nfge@one2team.com\n40 avenue Raymond Poincaré\n75116 Paris\n"},{"id":"110999","messageId":"83d7aaa40904100318k5aa779c4h95cd01727eafbb35@mail.gmail.com","threadId":"18823","inReplyTo":"loom.20090410T084314-918@post.gmane.org","subject":"Re: [FR] Encrypting the repository","fromName":"Geoffrey Lee","fromEmail":"geoffreyj.lee@gmail.com","sentAt":"2009-04-10T10:18:59Z","receivedAt":"2009-04-10T10:18:59Z","isPatch":false,"sender":{"key":"geoffreyj.lee@gmail.com","avatar":"https://gravatar.com/avatar/eda7290effb2fe936a54951db47d049adf71d6bd41b70c56dd9dedc8f3327c39?d=mp&s=160"},"body":"On Fri, Apr 10, 2009 at 1:49 AM, Aaron Digulla wrote:\n> I need a way to safely synchronize data between several places using an unsafe\n> storage (USB stick, Internet drive). So my question is: How much work would it\n> be to patch GIT to encrypt all files in the repository using AES-256?\n\nWhy in the world would you want to modify Git to do that? Just use an\nexisting encryption solution. If you need to use a USB drive, then use\ndisk encryption. If you need to do it online, then use SSH.\nhttp://www.dmoz.org/Computers/Security/Products_and_Tools/Cryptography/\n\n-Geoffrey Lee\n"},{"id":"111000","messageId":"fabb9a1e0904100330u61a7e252he546f0edc4e016a7@mail.gmail.com","threadId":"18823","inReplyTo":"loom.20090410T084314-918@post.gmane.org","subject":"Re: [FR] Encrypting the repository","fromName":"Sverre Rabbelier","fromEmail":"srabbelier@gmail.com","sentAt":"2009-04-10T10:30:47Z","receivedAt":"2009-04-10T10:30:47Z","isPatch":false,"sender":{"key":"srabbelier@gmail.com","avatar":"https://avatars.githubusercontent.com/u/3098?v=4"},"body":"Heya,\n\nOn Fri, Apr 10, 2009 at 10:49, Aaron Digulla wrote:\n> I need a way to safely synchronize data between several places using an unsafe\n> storage (USB stick, Internet drive). So my question is: How much work would it\n> be to patch GIT to encrypt all files in the repository using AES-256?\n\nEncrypt the entire drive flash drive [0], and then use git like\nnormal, 0 changes required ;). You can also create an encrypted file,\nand then use git like normal, also 0 changes required!\n\n[0] http://www.truecrypt.org/\n\n-- \nCheers,\n\nSverre Rabbelier\n"},{"id":"111002","messageId":"49DF28E4.3070609@hepe.com","threadId":"18823","inReplyTo":"200904101114.07385.fge@one2team.com","subject":"Re: [FR] Encrypting the repository","fromName":"Aaron Digulla","fromEmail":"digulla@hepe.com","sentAt":"2009-04-10T11:09:24Z","receivedAt":"2009-04-10T11:09:24Z","isPatch":false,"sender":{"key":"digulla@hepe.com","avatar":"https://gravatar.com/avatar/5d92aac0fd9bc45104985658d330bbf1bba4363685d16c4cbd70b9ddd19eb01e?d=mp&s=160"},"body":"Francis Galiegue wrote:\n> Le vendredi 10 avril 2009, vous avez écrit :\n>> Hello,\n>>\n>> I need a way to safely synchronize data between several places using an \n> unsafe\n>> storage (USB stick, Internet drive). So my question is: How much work would \n> it\n>> be to patch GIT to encrypt all files in the repository using AES-256?\n>>\n>> I'm aware that this leaves an issue unresolved (where should I store the\n>> password so that GIT doesn't have to ask for it all the time?) but one step \n> at a\n>> time, please :)\n>>\n>> Regards,\n>>\n> \n> Why don't you just create an archive and encrypt that archive, instead of \n> encrypting every file?\n\nBecause I don't want to loose the change history.\n\n> Also, what are the target systems?\n\nLinux and Windows.\n\nRegards,\n\n-- \nAaron \"Optimizer\" Digulla a.k.a. Philmann Dark\n\"It's not the universe that's limited, it's our imagination.\nFollow me and I'll show you something beyond the limits.\"\nhttp://www.pdark.de/ http://blog.pdark.de/\n"},{"id":"111003","messageId":"49DF294E.7010407@hepe.com","threadId":"18823","inReplyTo":"fabb9a1e0904100330u61a7e252he546f0edc4e016a7@mail.gmail.com","subject":"Re: [FR] Encrypting the repository","fromName":"Aaron Digulla","fromEmail":"digulla@hepe.com","sentAt":"2009-04-10T11:11:10Z","receivedAt":"2009-04-10T11:11:10Z","isPatch":false,"sender":{"key":"digulla@hepe.com","avatar":"https://gravatar.com/avatar/5d92aac0fd9bc45104985658d330bbf1bba4363685d16c4cbd70b9ddd19eb01e?d=mp&s=160"},"body":"Sverre Rabbelier wrote:\n\n>> I need a way to safely synchronize data between several places using an unsafe\n>> storage (USB stick, Internet drive). So my question is: How much work would it\n>> be to patch GIT to encrypt all files in the repository using AES-256?\n> \n> Encrypt the entire drive flash drive [0], and then use git like\n> normal, 0 changes required ;). You can also create an encrypted file,\n> and then use git like normal, also 0 changes required!\n\nHow do I encrypt an Internet drive (like Dropbox)? Also, if possible, \nI'd like not to have to install any software on the local computer \n(well, besides git, obviously).\n\nRegards,\n\n-- \nAaron \"Optimizer\" Digulla a.k.a. Philmann Dark\n\"It's not the universe that's limited, it's our imagination.\nFollow me and I'll show you something beyond the limits.\"\nhttp://www.pdark.de/ http://blog.pdark.de/\n"},{"id":"111001","messageId":"fabb9a1e0904100417k27d87e76he3b05d078c0a07bd@mail.gmail.com","threadId":"18823","inReplyTo":"49DF294E.7010407@hepe.com","subject":"Re: [FR] Encrypting the repository","fromName":"Sverre Rabbelier","fromEmail":"srabbelier@gmail.com","sentAt":"2009-04-10T11:17:14Z","receivedAt":"2009-04-10T11:17:14Z","isPatch":false,"sender":{"key":"srabbelier@gmail.com","avatar":"https://avatars.githubusercontent.com/u/3098?v=4"},"body":"Heya,\n\nOn Fri, Apr 10, 2009 at 13:11, Aaron Digulla wrote:\n> How do I encrypt an Internet drive (like Dropbox)? Also, if possible, I'd\n> like not to have to install any software on the local computer (well,\n> besides git, obviously).\n\nAs long as dropbox allows you to store a file (the file that is\nencrypted by TrueCrypt) there is no additional work needed. Obviously\nthough you will need to install TrueCrypt, under windows there is an\noption to create a \"traveler disk\" (which can be used from the target\n(flash) drive without installing additional software IIRC), but I do\nnot know if it is available for Linux or OSX.\n\n-- \nCheers,\n\nSverre Rabbelier\n"},{"id":"111039","messageId":"alpine.LFD.2.00.0904102159000.6741@xanadu.home","threadId":"18823","inReplyTo":"49DF294E.7010407@hepe.com","subject":"Re: [FR] Encrypting the repository","fromName":"Nicolas Pitre","fromEmail":"nico@cam.org","sentAt":"2009-04-11T02:03:58Z","receivedAt":"2009-04-11T02:03:58Z","isPatch":false,"sender":{"key":"nico@fluxnic.net","avatar":"https://avatars.githubusercontent.com/u/702790?v=4"},"body":"On Fri, 10 Apr 2009, Aaron Digulla wrote:\n\n> Sverre Rabbelier wrote:\n> \n> > > I need a way to safely synchronize data between several places using an\n> > > unsafe\n> > > storage (USB stick, Internet drive). So my question is: How much work\n> > > would it\n> > > be to patch GIT to encrypt all files in the repository using AES-256?\n> > \n> > Encrypt the entire drive flash drive [0], and then use git like\n> > normal, 0 changes required ;). You can also create an encrypted file,\n> > and then use git like normal, also 0 changes required!\n> \n> How do I encrypt an Internet drive (like Dropbox)? Also, if possible, I'd like\n> not to have to install any software on the local computer (well, besides git,\n> obviously).\n\nYou can create git bundles, which is a way to synchronize repositories \nwithout using a direct network connection. A bundle is simply a single \nfile with the needed data to perform repository updates.\n\nSo you could use bundles, and encrypt them with the encryption tool of \nyour choice before storing them on a USB stick for example.\n\n\nNicolas\n"}]}