double encryption with encfs.

[ccchan234]

hi~
heard some people suggest double encryption (see below).
I would like to use encfs4win with gocryptfs(win) with 2 different password.

any idea which one should be outer layer which inner layer?

thankyou.

ps: someone hurt by openssl s heartbleed.

From the Canyon Edge: Double Encryption, for the Win!
blog.dustinkirkland.com › 2014/05 › do...
1 May 2014 · Upon learning about the Heartbleed vulnerability in OpenSSL, my first thoughts were pretty desperate. I basically lost all faith in humanity's ability to write secure ...

[ccchan234]

oh. i am new to github.

if i should post in "pull request" instead, pls let me know.thx

[ccchan234]

tried.
windows 7 64b platform.
encfs4win 1.10.13 (lastest) with latest gocryptfs (cpp for win).

It worked if gocryptfs is the super-encryption (the outer layer),
but not when encfs is the super-encryption (outer layer).

so if anyon is paranoid as me,
can do gocryptfs as the outer layer,
then do a encfs as a 2nd inner layer.

the dokay installed with encfs4win worked for gocryptfs too.

[ccchan234]

gocryptfs can be the inner layer provided the config file is outside encfs s folder.

i.e. can be in same folder as encfs6.xml,
but not inside the mount of encfs.

otherwise gocryptfs will say cant find config file.

thx

[ccchan234]

Request to let encfs work WITH gocryptfs.

I am a paranoid and wish I could DOUBLE encryption
my things on cloud.

encfs is good, gocryptfs also good.
But why not BOTH?

Now I tried using encfs for outer layer but then
gocryptfs need the .conf file put in the same
folder as .encfs6.xml.
Yet the dokan or something make the FUSE drive
with only 512MB, so files > 512MB could not be
encrypted.

The reverse of using gocryptfs on outside,
as encfs4win seems dont allow user-choose
location (in windows), the above trick cant be used
and I cant make it run.

Thanks for the authors and others.

Thank you.

ps:
Double Encryption, for the Win!
http://blog.dustinkirkland.com/2014/05/double-encryption-for-win.html
Someone's thought after openSSL's bug of heartbleed.

my system:
win ver of encfs: encfs4win
win ver of gocryptfs: cppcryptf

[ccchan234]

I made a wordpress page:
https://bullshitmanblog.wordpress.com/double-encryption-for-cloud-storage-20180428-143058/

will try to summarize my trial and errors at a user level.

[ccchan234]

it can be done.

see

vgough/encfs#518