I've actually just started dabbling in the raspeberry pi but no stranger to hacking around these controllers. Having said that, my knowledge is lacking in a few areas.
A little about what I want to try to achieve: I am fooling around with one of the pi cameras and the picamera module for raspberry Pi. I'm trying to record stuff at the highest quality- right now I guess 1080p at 30fps. I want to write/record these videos to a usb stick plugged into the raspberry pi, which i would also like to be encrypted due to the fact that I will be removing and plugging that usb stick into my computer (I use both PC and Mac) to view/modify these movie files. Then I can remove those files from the usb stick as I need to and then replug into the Pi and record more, etc.
I don't need supreme protection. I'm more or less looking for an easy user experience at the expense of top notch security as I've read that means keeping some important logins/passwords in a file on the drive. I'm ok with that as long as the info is indeed encrypted from the casual peeker.
- Assuming I dont want to have to allocate space beforehand to this encrypted directory/drive, thus does that really leave me only with ecryptfs or encfs? Can i use gpgdir?
- Would I be recording the video to a directory outside of the encrypted directory/usb, then once that file has completed recording, automate the encryption into the encrypted directory? Or is it possible to just write into the encrypted directory?
- Can this encrypted usb stick be auto mounted? EDIT: I think I can glean on how to do this using this method.
I saw a neat tutorial that seemed to do what I wanted using TrueCrypt and the Pi though truecrypt is no longer supported.
Thanks for any help!
EDIT: Made it through cross referencing this but getting a few errors on boot:
... starting early crypto disks usbdrive_crypt: keyfile not found usbdrive_crypt (invalid key) ... starting remaining crypto disks usbdrive_crypt: keyfile not found usbdrive_crypt (invalid key) ... checking file systems... ... open: no such file or directory ... fsck died with exit status 6 ... mounting local filesystems..mount: special device /dev/mapper/usbdrive_crypt does not exist...
usbencrypted UUID=xxxx /boot/key_luks luks
/dev/mapper/usbencrypted /mnt/usbdrive vfat defaults 0 2