[gentoo-user] Encrypting a file containing confidential info

[gentoo-user] Encrypting a file containing confidential info

[Mick]

[-- Attachment #1: Type: text/plain, Size: 792 bytes --]

Hi All,

For some years now I have saved my passwords and other rather critical login 
data and information as database file on a Psion pda.  The file is encrypted 
and decrypted using a Psion application called FreeCrypt.  FreeCrypt uses an 
RC4 algorithm to encrypt the data.

As the hardware is approaching the end of its useful life I wanted to move 
away from my dependence on Psion, or use another method in parallel.  I have 
of course gpg on my laptop, but I am concerned that I will be keeping both my 
private key and the encrypted file on the same machine.

What would you suggest I should use bearing in mind that simplicity and use of 
default linux tools would be most preferable, commensurate with as high a 
degree of security as possible.
-- 
Regards,
Mick

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] Encrypting a file containing confidential info

[Arturo 'Buanzo' Busleiman]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mick wrote:
> As the hardware is approaching the end of its useful life I wanted to move 
> away from my dependence on Psion, or use another method in parallel.  I have 
> of course gpg on my laptop, but I am concerned that I will be keeping both my 
> private key and the encrypted file on the same machine.

You also need the passphrase to unlock the private key, so, as far as you use big enough keys, and
good enough passphrases, your mind can't be hacked into (oh well, depends on torture, but...)

- --
Arturo "Buanzo" Busleiman - Consultor Independiente en Seguridad Informatica
Me caso este 1ro de diciembre: Lista de Casamiento Numero 37520 en todos los FRAVEGA!! :)
http://www.buanzo.com.ar | http://www.vivamoslavida.com.ar : Portal no-comercial del buen vivir!

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFVcs3AlpOsGhXcE0RAoMRAJ9qOrb6nUyTW93cnlnHDegUtUNvsACfRRtt
oAiMk7rtgEQL18EcTuPzAbM=
=7QWN
-----END PGP SIGNATURE-----
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Encrypting a file containing confidential info

[Mick]

[-- Attachment #1: Type: text/plain, Size: 714 bytes --]

On Saturday 11 November 2006 13:08, Arturo 'Buanzo' Busleiman wrote:
> Mick wrote:
> > As the hardware is approaching the end of its useful life I wanted to
> > move away from my dependence on Psion, or use another method in parallel.
> >  I have of course gpg on my laptop, but I am concerned that I will be
> > keeping both my private key and the encrypted file on the same machine.
>
> You also need the passphrase to unlock the private key, so, as far as you
> use big enough keys, and good enough passphrases, your mind can't be hacked
> into (oh well, depends on torture, but...)

He, he! :)

I was thinking of memory dumps being accessed by malicious software/entities?

-- 
Regards,
Mick

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] Encrypting a file containing confidential info

[Fabrice Delliaux]

Le Sat, 11 Nov 2006 12:35:24 +0000,
Mick wrote :
> What would you suggest I should use bearing in mind that simplicity
> and use of default linux tools would be most preferable, commensurate
> with as high a degree of security as possible.

I'm using this :

	http://dev.gentoo.org/~agriffis/userpass/

You just need to install ruby, and of course, gpg.
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Encrypting a file containing confidential info

[Mick]

[-- Attachment #1: Type: text/plain, Size: 517 bytes --]

On Saturday 11 November 2006 13:35, Fabrice Delliaux wrote:
> Le Sat, 11 Nov 2006 12:35:24 +0000,
>
> Mick wrote :
> > What would you suggest I should use bearing in mind that simplicity
> > and use of default linux tools would be most preferable, commensurate
> > with as high a degree of security as possible.
>
> I'm using this :
>
> 	http://dev.gentoo.org/~agriffis/userpass/
>
> You just need to install ruby, and of course, gpg.

Thanks.  I couldn't find it in portage . . .
-- 
Regards,
Mick

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] Encrypting a file containing confidential info

[Andrey]

On Saturday 11 November 2006 19:46, Mick wrote:
> On Saturday 11 November 2006 13:35, Fabrice Delliaux wrote:
> > Le Sat, 11 Nov 2006 12:35:24 +0000,
> >
> > Mick wrote :
> > > What would you suggest I should use bearing in mind that simplicity
> > > and use of default linux tools would be most preferable, commensurate
> > > with as high a degree of security as possible.
> >
> > I'm using this :
> >
> > 	http://dev.gentoo.org/~agriffis/userpass/
> >
> > You just need to install ruby, and of course, gpg.
>
> Thanks.  I couldn't find it in portage . . .

This script isn't in portage...
Only on http://dev.gentoo.org/~agriffis/userpass/.
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Encrypting a file containing confidential info

[Javier]

> > > I'm using this :
> > >
> > >     http://dev.gentoo.org/~agriffis/userpass/

I'm using KeePassX [1] to store my passwords and my private keys. This
is a gpl application with a windows version to use at work =) I think
keepassx is by far the best application to store passwords and
personal files I've found. I also found upm [2] but it  seems to be
with no mantainer


Best regards,
Javier

[1] http://keepassx.sf.net
[2] http://upm.sf.net
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Encrypting a file containing confidential info

[Mick]

[-- Attachment #1: Type: text/plain, Size: 653 bytes --]

On Monday 13 November 2006 05:58, Javier wrote:
> > > > I'm using this :
> > > >
> > > >     http://dev.gentoo.org/~agriffis/userpass/
>
> I'm using KeePassX [1] to store my passwords and my private keys. This
> is a gpl application with a windows version to use at work =) I think
> keepassx is by far the best application to store passwords and
> personal files I've found. I also found upm [2] but it  seems to be
> with no mantainer
>
>
> Best regards,
> Javier
>
> [1] http://keepassx.sf.net
> [2] http://upm.sf.net

Thanks for the links and suggestions!  :)

I'll have a look and see which suits me best.
-- 
Regards,
Mick

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]