# [FR] Encrypting the repository 8 messages from 2009-04-10 to 2009-04-11. Participants: Aaron Digulla, Francis Galiegue, Geoffrey Lee, Sverre Rabbelier, Nicolas Pitre. Thread: https://gitlist.dev/t/18823 ## Aaron Digulla, 2009-04-10 08:49 Subject: [FR] Encrypting the repository Message-ID: URL: https://gitlist.dev/e/loom.20090410T084314-918%40post.gmane.org ``` Hello, I need a way to safely synchronize data between several places using an unsafe storage (USB stick, Internet drive). So my question is: How much work would it be to patch GIT to encrypt all files in the repository using AES-256? I'm aware that this leaves an issue unresolved (where should I store the password so that GIT doesn't have to ask for it all the time?) but one step at a time, please :) Regards, -- Aaron "Optimizer" Digulla ``` ## Francis Galiegue, 2009-04-10 09:14 Subject: Re: [FR] Encrypting the repository Message-ID: <200904101114.07385.fge@one2team.com> URL: https://gitlist.dev/e/200904101114.07385.fge%40one2team.com In-Reply-To: ``` Le vendredi 10 avril 2009, vous avez écrit : > Hello, > > I need a way to safely synchronize data between several places using an unsafe > storage (USB stick, Internet drive). So my question is: How much work would it > be to patch GIT to encrypt all files in the repository using AES-256? > > I'm aware that this leaves an issue unresolved (where should I store the > password so that GIT doesn't have to ask for it all the time?) but one step at a > time, please :) > > Regards, > Why don't you just create an archive and encrypt that archive, instead of encrypting every file? Also, what are the target systems? -- Francis Galiegue ONE2TEAM Ingénieur système Mob : +33 (0) 683 877 875 Tel : +33 (0) 178 945 552 fge@one2team.com 40 avenue Raymond Poincaré 75116 Paris ``` ## Geoffrey Lee, 2009-04-10 10:18 Subject: Re: [FR] Encrypting the repository Message-ID: <83d7aaa40904100318k5aa779c4h95cd01727eafbb35@mail.gmail.com> URL: https://gitlist.dev/e/83d7aaa40904100318k5aa779c4h95cd01727eafbb35%40mail.gmail.com In-Reply-To: ``` On Fri, Apr 10, 2009 at 1:49 AM, Aaron Digulla wrote: > I need a way to safely synchronize data between several places using an unsafe > storage (USB stick, Internet drive). So my question is: How much work would it > be to patch GIT to encrypt all files in the repository using AES-256? Why in the world would you want to modify Git to do that? Just use an existing encryption solution. If you need to use a USB drive, then use disk encryption. If you need to do it online, then use SSH. http://www.dmoz.org/Computers/Security/Products_and_Tools/Cryptography/ -Geoffrey Lee ``` ## Sverre Rabbelier, 2009-04-10 10:30 Subject: Re: [FR] Encrypting the repository Message-ID: URL: https://gitlist.dev/e/fabb9a1e0904100330u61a7e252he546f0edc4e016a7%40mail.gmail.com In-Reply-To: ``` Heya, On Fri, Apr 10, 2009 at 10:49, Aaron Digulla wrote: > I need a way to safely synchronize data between several places using an unsafe > storage (USB stick, Internet drive). So my question is: How much work would it > be to patch GIT to encrypt all files in the repository using AES-256? Encrypt the entire drive flash drive [0], and then use git like normal, 0 changes required ;). You can also create an encrypted file, and then use git like normal, also 0 changes required! [0] http://www.truecrypt.org/ -- Cheers, Sverre Rabbelier ``` ## Aaron Digulla, 2009-04-10 11:09 Subject: Re: [FR] Encrypting the repository Message-ID: <49DF28E4.3070609@hepe.com> URL: https://gitlist.dev/e/49DF28E4.3070609%40hepe.com In-Reply-To: <200904101114.07385.fge@one2team.com> ``` Francis Galiegue wrote: > Le vendredi 10 avril 2009, vous avez écrit : >> Hello, >> >> I need a way to safely synchronize data between several places using an > unsafe >> storage (USB stick, Internet drive). So my question is: How much work would > it >> be to patch GIT to encrypt all files in the repository using AES-256? >> >> I'm aware that this leaves an issue unresolved (where should I store the >> password so that GIT doesn't have to ask for it all the time?) but one step > at a >> time, please :) >> >> Regards, >> > > Why don't you just create an archive and encrypt that archive, instead of > encrypting every file? Because I don't want to loose the change history. > Also, what are the target systems? Linux and Windows. Regards, -- Aaron "Optimizer" Digulla a.k.a. Philmann Dark "It's not the universe that's limited, it's our imagination. Follow me and I'll show you something beyond the limits." http://www.pdark.de/ http://blog.pdark.de/ ``` ## Aaron Digulla, 2009-04-10 11:11 Subject: Re: [FR] Encrypting the repository Message-ID: <49DF294E.7010407@hepe.com> URL: https://gitlist.dev/e/49DF294E.7010407%40hepe.com In-Reply-To: ``` Sverre Rabbelier wrote: >> I need a way to safely synchronize data between several places using an unsafe >> storage (USB stick, Internet drive). So my question is: How much work would it >> be to patch GIT to encrypt all files in the repository using AES-256? > > Encrypt the entire drive flash drive [0], and then use git like > normal, 0 changes required ;). You can also create an encrypted file, > and then use git like normal, also 0 changes required! How do I encrypt an Internet drive (like Dropbox)? Also, if possible, I'd like not to have to install any software on the local computer (well, besides git, obviously). Regards, -- Aaron "Optimizer" Digulla a.k.a. Philmann Dark "It's not the universe that's limited, it's our imagination. Follow me and I'll show you something beyond the limits." http://www.pdark.de/ http://blog.pdark.de/ ``` ## Sverre Rabbelier, 2009-04-10 11:17 Subject: Re: [FR] Encrypting the repository Message-ID: URL: https://gitlist.dev/e/fabb9a1e0904100417k27d87e76he3b05d078c0a07bd%40mail.gmail.com In-Reply-To: <49DF294E.7010407@hepe.com> ``` Heya, On Fri, Apr 10, 2009 at 13:11, Aaron Digulla wrote: > How do I encrypt an Internet drive (like Dropbox)? Also, if possible, I'd > like not to have to install any software on the local computer (well, > besides git, obviously). As long as dropbox allows you to store a file (the file that is encrypted by TrueCrypt) there is no additional work needed. Obviously though you will need to install TrueCrypt, under windows there is an option to create a "traveler disk" (which can be used from the target (flash) drive without installing additional software IIRC), but I do not know if it is available for Linux or OSX. -- Cheers, Sverre Rabbelier ``` ## Nicolas Pitre, 2009-04-11 02:03 Subject: Re: [FR] Encrypting the repository Message-ID: URL: https://gitlist.dev/e/alpine.LFD.2.00.0904102159000.6741%40xanadu.home In-Reply-To: <49DF294E.7010407@hepe.com> ``` On Fri, 10 Apr 2009, Aaron Digulla wrote: > Sverre Rabbelier wrote: > > > > I need a way to safely synchronize data between several places using an > > > unsafe > > > storage (USB stick, Internet drive). So my question is: How much work > > > would it > > > be to patch GIT to encrypt all files in the repository using AES-256? > > > > Encrypt the entire drive flash drive [0], and then use git like > > normal, 0 changes required ;). You can also create an encrypted file, > > and then use git like normal, also 0 changes required! > > How do I encrypt an Internet drive (like Dropbox)? Also, if possible, I'd like > not to have to install any software on the local computer (well, besides git, > obviously). You can create git bundles, which is a way to synchronize repositories without using a direct network connection. A bundle is simply a single file with the needed data to perform repository updates. So you could use bundles, and encrypt them with the encryption tool of your choice before storing them on a USB stick for example. Nicolas ```