Remove eCryptfs

Reasons:

- Not full-disk encryption. Leaks metadata: file sizes, file name
  lengths.

- Poor audit results: no authentication (i.e. attacker can write
  encrypted data but not read), incosistent use of IVs, use of
  insecure hash algorithms like MD5.

- Current labeling system highlights eCryptfs with green "audited"
  sign, misleading our readers into thinking it's the best choice
  in the category, while the opposite is true.

- If user wants to have an encrypted data overlay, e.g. to sync
  with untrusted cloud service (Dropbox, Google Drive, rsync.org)
  they can use Cryptomator.

> eCryptfs appears to have a better crypto design than EncFS, but
> there are some red flags indicating that it was not designed by
> a cryptographer, and has not received enough security review. It
> should be safe to use, but more auditing would be a good idea.
parent 573512ff
Pipeline #68928587 passed with stages
in 4 minutes and 38 seconds
This diff is collapsed.
......@@ -68,12 +68,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "Connector d'OpenPGP per a Thunderbird/Icedove.",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -73,12 +73,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "Ein OpenPGP-Add-on für Thunderbird/Icedove.",
"notes": "[Hier findest du eine Anleitung](https://securityinabox.org/en/guide/thunderbird/linux/) von Security In A Box für die Verschlüsselung deiner E-Mail mit Mozilla Thunderbird, GNU Privacy Guard (GPG) und Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -69,12 +69,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "Πρόσθετο OpenPGP για Thunderbird/Icedove.",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -614,37 +614,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"audit": {
"author": "Taylor Hornby",
"date": "2014-01-22",
"description": "eCryptfs appears to have a better crypto design than EncFS, but there are some red flags indicating that it was not designed by a cryptographer, and has not received enough security review. It should be safe to use, but more auditing would be a good idea.",
"development_stage": "released",
"rating": "0",
"url": "https://defuse.ca/audits/ecryptfs.htm"
},
"categories": [
{
"name": "GNU/Linux",
"subcategories": [
"Disk Encryption"
]
}
],
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"development_stage": "released",
"license_url": "https://git.kernel.org/cgit/linux/kernel/git/tyhicks/ecryptfs.git/tree/COPYING",
"logo": "ecryptfs.svg",
"name": "eCryptfs",
"notes": "",
"privacy_url": "",
"protocols": [],
"slug": "ecryptfs",
"source_url": "https://git.kernel.org/cgit/linux/kernel/git/tyhicks/ecryptfs.git/tree/",
"tos_url": "",
"url": "https://ecryptfs.org",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"categories": [
{
......
......@@ -69,12 +69,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "Komplemento OpenPGP por Thunderbird/Icedove.",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -72,12 +72,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "Un agregado de OpenPGP para Thunderbird/Icedove.",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -68,12 +68,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "افزونه پی‌جی‌پی برای تاندربرد و آیس‌داو",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -73,12 +73,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-yhteensopiva yritystason kryptografinen (stacked-tyyppinen) tiedostojärjestelmä GNU/Linux järjestelmiin.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "OpenPGP-lisäosa Thunderbirdille ja Icedovelle.",
"notes": "[Tässä](https://securityinabox.org/en/guide/thunderbird/linux/) on Security In A Box:n opas sähköpostin salaamiseen Mozilla Thunderbird:illa yhdessä GNU Privacy Guard:in (GPG) ja and Enigmail:in kanssa. Lue myös Free Software Foundation toimittama [sähköpostin itsepuolustusopas](https://emailselfdefense.fsf.org) oppiaksesi miten sähköpostit salataan.",
......
......@@ -72,12 +72,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://fr.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "Un module complémentaire OpenPGP pour Thunderbird et Icedove.",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -71,12 +71,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "תוסף OpenPGP עבור Thunderbird ו־Icedove&#8206.",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -68,12 +68,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "थंडरबर्ड/आईसड़ोव के लिए आेपनपीजीपी प्लगिन.",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -68,12 +68,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "Komplemento OpenPGP por Thunderbird/Icedove.",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -73,12 +73,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://it.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "Stacked filesystem per GNU/Linux in ambito enterprise, criptato e conforme agli standard POSIX.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "Plugin per Thunderbird e Icedove con supporto OpenPGP.",
"notes": "[Qua si trova una guida](https://securityinabox.org/en/guide/thunderbird/linux/) di Security In A Box per cifrare le tue email con Mozilla Thunderbird, GNU Privacy Guard (GPG) ed Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -69,12 +69,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "Thunderbird/Icedove向けOpenPGPプラグイン。",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -72,12 +72,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "Een OpenPGP plugin voor Thunderbird/Icedove.",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -71,12 +71,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "En OpenPGP plugin for Thunderbird/Icedove.",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -69,12 +69,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "Plugin OpenPGP dla Thunderbird/Icedove.",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -69,12 +69,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "Uma extensão OpenPGP para Thunderbird/Icedove.",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -74,12 +74,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://ru.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-совместимая промышленная стековая криптографическая файловая система для GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "Дополнение для OpenPGP шифрования почты для Thunderbird и Icedove",
"notes": "[Здесь находится инструкция](https://securityinabox.org/ru/thunderbird_main) от Security In A Box, описывающая как шифровать свою электронную почту с помощью Mozilla Thunderbird, GNU Privacy Guard (GPG) и Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -71,12 +71,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "ОпенПГП додатак за Тандербирд/Ајсдав.",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -71,12 +71,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "OpenPGP dodatak za Thunderbird/Icedove.",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -72,12 +72,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "Ett OpenPGP tillägg för Thunderbird.",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -72,12 +72,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "Thunderbird ve Icedove için OpenPGP e-posta şifreleme eklentisi.",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
......@@ -73,12 +73,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "GNU/Linux 平台下的可移植的企业级加密文件存储系统。",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "雷鸟(Thunderbird)和冰鼬鼠(Icedove)上的一个 OpenPGP 加密插件。",
"notes": "[这里有一份 Security In A Box 提供的指南](https://securityinabox.org/en/guide/thunderbird/linux/) ,指导你用 Mozilla Thunderbird、GNU Privacy Guard (GPG)和 Enigmail 加密自己的邮件。你也可以阅读自由软件基金会的[电子邮件加密指南](https://emailselfdefense.fsf.org)来了解如何加密你的电子邮件内容。",
......
......@@ -69,12 +69,6 @@
"url": "https://duckduckgo.com/",
"wikipedia_url": "https://en.wikipedia.org/wiki/DuckDuckGo"
},
{
"description": "POSIX-compliant enterprise cryptographic stacked filesystem for GNU/Linux.",
"slug": "ecryptfs",
"url": "http://ecryptfs.org/",
"wikipedia_url": "https://en.wikipedia.org/wiki/ECryptfs"
},
{
"description": "Thunderbird 和 Icedove 的 OpenPGP 外掛。",
"notes": "[Here is a guide](https://securityinabox.org/en/guide/thunderbird/linux/) by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail. Also read the [Email Self-Defense guide](https://emailselfdefense.fsf.org) by the Free Software Foundation to learn how to encrypt your email messages.",
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment