39 lines
3.1 KiB
Markdown
39 lines
3.1 KiB
Markdown
|
||
All your files if placed in a cloud has the potential to be read or flagged for content. As a privacy-conscious user, it is important to take a look at secure encryption tools so that your data remains data meant for only your viewing. This includes viewing vis-a-vis robots as well.
|
||
|
||
---
|
||
|
||
|
||
Encryption tools:
|
||
|
||
Typical encryption setups for computers include BitLocker for Windows or [LUKS](https://gitlab.com/cryptsetup/cryptsetup/-/blob/main/README.md) for Linux. BitLocker is typically an enterprise encryption tool used for businesses but it can also be enabled on Home computers too if you follow these [instructions](https://www.privacyguides.org/en/encryption/#veracrypt-disk).
|
||
|
||
|
||
Browser Based:
|
||
- [Hat.sh](https://hat.sh) - provides file encryption within browser
|
||
- ![[Pasted image 20230810192136.png]]
|
||
|
||
Command Line:
|
||
- [Kryptor](https://www.kryptor.co.uk) - a simple, modern, and secure file encryption and signing tool for Windows, Linux, and macOS. A leaner, user-firendly alternative to GPG.
|
||
- [Veracrypt](https://veracrypt.fr/en/Home.html) - free open source disk encryption software
|
||
- Quite popular. VeraCrypt main features:
|
||
- Creates a **virtual encrypted disk** within a file and mounts it as a real disk.
|
||
- Encrypts an **entire partition or storage device** such as USB flash drive or hard drive.
|
||
- Encrypts a **partition or drive where Windows is installed** ([pre-boot authentication](https://veracrypt.fr/en/System%20Encryption.html)).
|
||
- Encryption is [**automatic**, **real-time**(on-the-fly) and **transparent**](https://veracrypt.fr/en/Documentation.html).
|
||
- [Parallelization](https://veracrypt.fr/en/Parallelization.html) and [pipelining](https://veracrypt.fr/en/Pipelining.html) allow data to be read and written as fast as if the drive was not encrypted.
|
||
- Encryption can be [hardware-accelerated](https://veracrypt.fr/en/Hardware%20Acceleration.html) on modern processors.
|
||
- Provides **[plausible deniability](https://veracrypt.fr/en/Plausible%20Deniability.html)**, in case an adversary forces you to reveal the password: **[Hidden volume](https://veracrypt.fr/en/Hidden%20Volume.html)** (steganography) and **[hidden operating system](https://veracrypt.fr/en/Hidden%20Operating%20System.html)**.
|
||
- More information about the features of VeraCrypt may be found in the [**documentation**](https://veracrypt.fr/en/Documentation.html)
|
||
- [Cryptomater](https://cryptomator.org) - for cloud encryption.
|
||
- Cryptsetup - an open source utility for disk encryption
|
||
- OpenPGP - Open Source implementation of Pretty Good Privacy. Has been around a long time. Good for encrypting email or digitally signing.
|
||
- use future defauts when generating keys
|
||
- When [generating keys](https://www.gnupg.org/gph/en/manual/c14.html) we suggest using the `future-default` command as this will instruct GnuPG use modern cryptography such as [Curve25519](https://en.wikipedia.org/wiki/Curve25519#History) and [Ed25519](https://ed25519.cr.yp.to/):
|
||
```gpg --quick-gen-key alice@example.com future-default```
|
||
-
|
||
|
||
|
||
|
||
Email:
|
||
- [Tutanota](https://tutanota.com) - privacy-conscious email service with great UI & updating for PQC algorithm-resistant software! |