threads / discuss / 18823

[FR] Encrypting the repository

Subject: [FR] Encrypting the repository

## tl;dr

8 messages between Apr 10, 2009 and Apr 11, 2009.

replies: 7people: 5as markdown or json

Aaron Digulla· Apr 10, 2009, 08:49 UTC · lore

Hello,

I need a way to safely synchronize data between several places using an unsafe storage (USB stick, Internet drive). So my question is: How much work would it be to patch GIT to encrypt all files in the repository using AES-256?

I'm aware that this leaves an issue unresolved (where should I store the password so that GIT doesn't have to ask for it all the time?) but one step at a time, please :)

Regards,

-- 
Aaron "Optimizer" Digulla

Francis Galiegue· Apr 10, 2009, 09:14 UTC · re: Aaron Digulla · lore

Re: [FR] Encrypting the repository

Le vendredi 10 avril 2009, vous avez écrit :

> Hello,
> 
> I need a way to safely synchronize data between several places using an

unsafe

> storage (USB stick, Internet drive). So my question is: How much work would

it

> be to patch GIT to encrypt all files in the repository using AES-256?
> 
> I'm aware that this leaves an issue unresolved (where should I store the
> password so that GIT doesn't have to ask for it all the time?) but one step

at a

> time, please :)
> 
> Regards,
>

Why don't you just create an archive and encrypt that archive, instead of encrypting every file?

Also, what are the target systems?

-- 
Francis Galiegue
ONE2TEAM
Ingénieur système
Mob : +33 (0) 683 877 875
Tel : +33 (0) 178 945 552
fge@one2team.com
40 avenue Raymond Poincaré
75116 Paris

Aaron Digulla· Apr 10, 2009, 11:09 UTC · re: Francis Galiegue · lore

Re: [FR] Encrypting the repository

Francis Galiegue wrote:

Show 19 quoted lines

> Le vendredi 10 avril 2009, vous avez écrit :
>> Hello,
>>
>> I need a way to safely synchronize data between several places using an 
> unsafe
>> storage (USB stick, Internet drive). So my question is: How much work would 
> it
>> be to patch GIT to encrypt all files in the repository using AES-256?
>>
>> I'm aware that this leaves an issue unresolved (where should I store the
>> password so that GIT doesn't have to ask for it all the time?) but one step 
> at a
>> time, please :)
>>
>> Regards,
>>
> 
> Why don't you just create an archive and encrypt that archive, instead of 
> encrypting every file?

Because I don't want to loose the change history.

> Also, what are the target systems?

Linux and Windows.

Regards,

-- 
Aaron "Optimizer" Digulla a.k.a. Philmann Dark
"It's not the universe that's limited, it's our imagination.
Follow me and I'll show you something beyond the limits."
http://www.pdark.de/                 http://blog.pdark.de/

Geoffrey Lee· Apr 10, 2009, 10:18 UTC · re: Aaron Digulla · lore

Re: [FR] Encrypting the repository

On Fri, Apr 10, 2009 at 1:49 AM, Aaron Digulla <digulla@hepe.com> wrote:

> I need a way to safely synchronize data between several places using an unsafe
> storage (USB stick, Internet drive). So my question is: How much work would it
> be to patch GIT to encrypt all files in the repository using AES-256?

Why in the world would you want to modify Git to do that? Just use an existing encryption solution. If you need to use a USB drive, then use disk encryption. If you need to do it online, then use SSH. http://www.dmoz.org/Computers/Security/Products_and_Tools/Cryptography/

-Geoffrey Lee

Sverre Rabbelier· Apr 10, 2009, 10:30 UTC · re: Aaron Digulla · lore

Re: [FR] Encrypting the repository

Heya,

On Fri, Apr 10, 2009 at 10:49, Aaron Digulla <digulla@hepe.com> wrote:

> I need a way to safely synchronize data between several places using an unsafe
> storage (USB stick, Internet drive). So my question is: How much work would it
> be to patch GIT to encrypt all files in the repository using AES-256?

Encrypt the entire drive flash drive [0], and then use git like normal, 0 changes required ;). You can also create an encrypted file, and then use git like normal, also 0 changes required!

[0] http://www.truecrypt.org/

-- 
Cheers,

Sverre Rabbelier

Aaron Digulla· Apr 10, 2009, 11:11 UTC · re: Sverre Rabbelier · lore

Re: [FR] Encrypting the repository

Sverre Rabbelier wrote:

Show 7 quoted lines

>> I need a way to safely synchronize data between several places using an unsafe
>> storage (USB stick, Internet drive). So my question is: How much work would it
>> be to patch GIT to encrypt all files in the repository using AES-256?
> 
> Encrypt the entire drive flash drive [0], and then use git like
> normal, 0 changes required ;). You can also create an encrypted file,
> and then use git like normal, also 0 changes required!

How do I encrypt an Internet drive (like Dropbox)? Also, if possible, I'd like not to have to install any software on the local computer (well, besides git, obviously).

Regards,

-- 
Aaron "Optimizer" Digulla a.k.a. Philmann Dark
"It's not the universe that's limited, it's our imagination.
Follow me and I'll show you something beyond the limits."
http://www.pdark.de/                 http://blog.pdark.de/

Sverre Rabbelier· Apr 10, 2009, 11:17 UTC · re: Aaron Digulla · lore

Re: [FR] Encrypting the repository

Heya,

On Fri, Apr 10, 2009 at 13:11, Aaron Digulla <digulla@hepe.com> wrote:

> How do I encrypt an Internet drive (like Dropbox)? Also, if possible, I'd
> like not to have to install any software on the local computer (well,
> besides git, obviously).

As long as dropbox allows you to store a file (the file that is encrypted by TrueCrypt) there is no additional work needed. Obviously though you will need to install TrueCrypt, under windows there is an option to create a "traveler disk" (which can be used from the target (flash) drive without installing additional software IIRC), but I do not know if it is available for Linux or OSX.

-- 
Cheers,

Sverre Rabbelier

Nicolas Pitre· Apr 11, 2009, 02:03 UTC · re: Aaron Digulla · lore

Re: [FR] Encrypting the repository

On Fri, 10 Apr 2009, Aaron Digulla wrote:

Show 15 quoted lines

> Sverre Rabbelier wrote:
> 
> > > I need a way to safely synchronize data between several places using an
> > > unsafe
> > > storage (USB stick, Internet drive). So my question is: How much work
> > > would it
> > > be to patch GIT to encrypt all files in the repository using AES-256?
> > 
> > Encrypt the entire drive flash drive [0], and then use git like
> > normal, 0 changes required ;). You can also create an encrypted file,
> > and then use git like normal, also 0 changes required!
> 
> How do I encrypt an Internet drive (like Dropbox)? Also, if possible, I'd like
> not to have to install any software on the local computer (well, besides git,
> obviously).

You can create git bundles, which is a way to synchronize repositories without using a direct network connection. A bundle is simply a single file with the needed data to perform repository updates.

So you could use bundles, and encrypt them with the encryption tool of your choice before storing them on a USB stick for example.

Nicolas