git/list[1] front-page[2] threads[3] people[4] search[5] about
 

encrypted repositories?

From
MAMatthias Andree <matthias.andree@gmx.de>
Date
Jul 17, 2009, 15:14 UTC
Message-ID
<op.uw7wmbr41e62zd@balu.cs.uni-paderborn.de>
Greetings,
I have a rather special usage scenario.

Assume you have a repository where you want to work on embargoed information, so that not even system administrators of the server you're pushing to can get a hold of the cleartext data.

"Server" would be a central reference repository that I can push to. "Client" would by my working computer that has a clone of the crypted repo, and an unencrypted checkout of it. Perhaps the client would also need an unencrypted copy of the repo (for performance reasons, I'm not sure about that) that gets encrypted on the fly when pushing and decrypted when fetching.

Examples of use might be press releases of upcoming products, written exams for students, whatever.

Requirements:
- "client" that is about to push must encrypt the data before pushing it  
to the server.
- all data (including file names, log messages,
Allowed restrictions:
- "server" limited to bare repositories
- initial version limited to symmetric encryption with pre-shared secret

In a later step, some key management and asymmetric crypto would be useful, but that's not crucial now. In my current scenario, those who are working on the embargoed material would trust one another.

How would one go about this from the user side? I sincerely doubt I have the resources (time!) to actually implement this in Git.

TIA
-- 
Matthias Andree
Next: Michael J Gruber
Message 1 of 17 in “encrypted repositories?”
  1. Matthias AndreeJul 17, 2009
  2. Michael J GruberJul 17, 2009
  3. Jakub NarebskiJul 17, 2009
  4. Matthias KestenholzJul 17, 2009
  5. Linus TorvaldsJul 17, 2009
  6. John TapsellJul 17, 2009
  7. Linus TorvaldsJul 17, 2009
  8. Linus TorvaldsJul 17, 2009
  9. Thomas KochJul 18, 2009
  10. Matthias AndreeJul 20, 2009
  11. Matthias AndreeJul 20, 2009
  12. Jakub NarebskiJul 20, 2009
  13. Matthias AndreeJul 21, 2009
  14. Jeff KingJul 20, 2009
  15. Matthias AndreeJul 21, 2009
  16. Jeff KingJul 23, 2009
  17. J-S-BAug 2, 2012

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.