Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It only takes a minute to sign up.
Sign up to join this community
I used ecryptfs-migrate-home to encrypt my home folder on my Debian (Testing) system.
As I am a complete encryption-greenhorn, I don't know yet how to check, if the encryption succeeded. However, I suppose encryption works but filenames are not encrypted. I want to have encrypted filenames as well.
How can I get encrypted filenames for my (already encrypted) /home-folder?
The encrypted home utilities don't support the ability to enable encrypted filenames after you've set up your encrypted home directory. But, I looked at the ecryptfs-migrate-home script and believe that it should be enabling filename encryption by default.
Let's verify that filename encryption is enabled. Do you have two lines in your key signature file?
$ wc -l ~/.ecryptfs/Private.sig
2 /home/user/.ecryptfs/Private.sig
If wc reports that there are two lines, things are looking good so far. Check to see if the eCryptfs mount includes the filename encryption key signature mount option:
$ grep ecryptfs_fnek_sig= /proc/mounts
/home/user/.Private /home/user ecryptfs rw,nosuid,nodev,relatime,ecryptfs_fnek_sig=0011223344556677,ecryptfs_sig=8899aabbccddeeff,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_unlink_sigs 0 0
If you see the ecryptfs_fnek_sig option, things are looking even better. Now make sure that filenames are encrypted in the lower filesystem:
$ ls /home/.ecryptfs/user/.Private
Do all filenames have a "ECRYPTFS_FNEK_ENCRYPTED." prefix? If so, the filename encryption feature is configured and working correctly.
cat /sys/fs/ecryptfs/versionshow?cat /sys/fs/ecryptfs/versionsays 375 - I am on Debian Testing, therefore it should be alright, then. Can you tell me how to view the encrypted files?ls /home/usernamedoesn't list me my files (neither encrypted nor unencrypted)~/.Private, and when active the plaintext content is accessible through~/Private. Are you sure that you have non-encrypted filenames in~/.Private? In~/Private, of course, you see the real file names — or nothing when the volume isn't active.