[FR] Encrypting the repository

[FR] Encrypting the repository

[Aaron Digulla]

Hello,

I need a way to safely synchronize data between several places using an unsafe
storage (USB stick, Internet drive). So my question is: How much work would it
be to patch GIT to encrypt all files in the repository using AES-256?

I'm aware that this leaves an issue unresolved (where should I store the
password so that GIT doesn't have to ask for it all the time?) but one step at a
time, please :)

Regards,

-- 
Aaron "Optimizer" Digulla

Re: [FR] Encrypting the repository

[Francis Galiegue]

Le vendredi 10 avril 2009, vous avez écrit :
> Hello,
> 
> I need a way to safely synchronize data between several places using an 
unsafe
> storage (USB stick, Internet drive). So my question is: How much work would 
it
> be to patch GIT to encrypt all files in the repository using AES-256?
> 
> I'm aware that this leaves an issue unresolved (where should I store the
> password so that GIT doesn't have to ask for it all the time?) but one step 
at a
> time, please :)
> 
> Regards,
> 

Why don't you just create an archive and encrypt that archive, instead of 
encrypting every file?

Also, what are the target systems?

-- 
Francis Galiegue
ONE2TEAM
Ingénieur système
Mob : +33 (0) 683 877 875
Tel : +33 (0) 178 945 552
fge@one2team.com
40 avenue Raymond Poincaré
75116 Paris

Re: [FR] Encrypting the repository

[Geoffrey Lee]

On Fri, Apr 10, 2009 at 1:49 AM, Aaron Digulla <digulla@hepe.com> wrote:
> I need a way to safely synchronize data between several places using an unsafe
> storage (USB stick, Internet drive). So my question is: How much work would it
> be to patch GIT to encrypt all files in the repository using AES-256?

Why in the world would you want to modify Git to do that? Just use an
existing encryption solution. If you need to use a USB drive, then use
disk encryption. If you need to do it online, then use SSH.
http://www.dmoz.org/Computers/Security/Products_and_Tools/Cryptography/

-Geoffrey Lee

Re: [FR] Encrypting the repository

[Sverre Rabbelier]

Heya,

On Fri, Apr 10, 2009 at 10:49, Aaron Digulla <digulla@hepe.com> wrote:
> I need a way to safely synchronize data between several places using an unsafe
> storage (USB stick, Internet drive). So my question is: How much work would it
> be to patch GIT to encrypt all files in the repository using AES-256?

Encrypt the entire drive flash drive [0], and then use git like
normal, 0 changes required ;). You can also create an encrypted file,
and then use git like normal, also 0 changes required!

[0] http://www.truecrypt.org/

-- 
Cheers,

Sverre Rabbelier

Re: [FR] Encrypting the repository

[Aaron Digulla]

Francis Galiegue wrote:
> Le vendredi 10 avril 2009, vous avez écrit :
>> Hello,
>>
>> I need a way to safely synchronize data between several places using an 
> unsafe
>> storage (USB stick, Internet drive). So my question is: How much work would 
> it
>> be to patch GIT to encrypt all files in the repository using AES-256?
>>
>> I'm aware that this leaves an issue unresolved (where should I store the
>> password so that GIT doesn't have to ask for it all the time?) but one step 
> at a
>> time, please :)
>>
>> Regards,
>>
> 
> Why don't you just create an archive and encrypt that archive, instead of 
> encrypting every file?

Because I don't want to loose the change history.

> Also, what are the target systems?

Linux and Windows.

Regards,

-- 
Aaron "Optimizer" Digulla a.k.a. Philmann Dark
"It's not the universe that's limited, it's our imagination.
Follow me and I'll show you something beyond the limits."
http://www.pdark.de/                 http://blog.pdark.de/

Re: [FR] Encrypting the repository

[Aaron Digulla]

Sverre Rabbelier wrote:

>> I need a way to safely synchronize data between several places using an unsafe
>> storage (USB stick, Internet drive). So my question is: How much work would it
>> be to patch GIT to encrypt all files in the repository using AES-256?
> 
> Encrypt the entire drive flash drive [0], and then use git like
> normal, 0 changes required ;). You can also create an encrypted file,
> and then use git like normal, also 0 changes required!

How do I encrypt an Internet drive (like Dropbox)? Also, if possible, 
I'd like not to have to install any software on the local computer 
(well, besides git, obviously).

Regards,

-- 
Aaron "Optimizer" Digulla a.k.a. Philmann Dark
"It's not the universe that's limited, it's our imagination.
Follow me and I'll show you something beyond the limits."
http://www.pdark.de/                 http://blog.pdark.de/

Re: [FR] Encrypting the repository

[Sverre Rabbelier]

Heya,

On Fri, Apr 10, 2009 at 13:11, Aaron Digulla <digulla@hepe.com> wrote:
> How do I encrypt an Internet drive (like Dropbox)? Also, if possible, I'd
> like not to have to install any software on the local computer (well,
> besides git, obviously).

As long as dropbox allows you to store a file (the file that is
encrypted by TrueCrypt) there is no additional work needed. Obviously
though you will need to install TrueCrypt, under windows there is an
option to create a "traveler disk" (which can be used from the target
(flash) drive without installing additional software IIRC), but I do
not know if it is available for Linux or OSX.

-- 
Cheers,

Sverre Rabbelier

Re: [FR] Encrypting the repository

[Nicolas Pitre]

On Fri, 10 Apr 2009, Aaron Digulla wrote:

> Sverre Rabbelier wrote:
> 
> > > I need a way to safely synchronize data between several places using an
> > > unsafe
> > > storage (USB stick, Internet drive). So my question is: How much work
> > > would it
> > > be to patch GIT to encrypt all files in the repository using AES-256?
> > 
> > Encrypt the entire drive flash drive [0], and then use git like
> > normal, 0 changes required ;). You can also create an encrypted file,
> > and then use git like normal, also 0 changes required!
> 
> How do I encrypt an Internet drive (like Dropbox)? Also, if possible, I'd like
> not to have to install any software on the local computer (well, besides git,
> obviously).

You can create git bundles, which is a way to synchronize repositories 
without using a direct network connection.  A bundle is simply a single 
file with the needed data to perform repository updates.

So you could use bundles, and encrypt them with the encryption tool of 
your choice before storing them on a USB stick for example.


Nicolas