file encryption ?

[j773303]

Doen anyone has the experience about HPUX file encryption? Is it possible when access a file, it is need deencryption the file then access it ?

Thanks,

[RAC_1]

Not something in built. If you have cutom program/app that you use, you can just encrypt using crypt command and decrypt it using same command.

man crypt for details.

[Peter Godron · Accepted solution]

Hi,
you can use the -x option on vi to automatically en/de-crypt files.

vi -x a.lis will ask for a encryption key

write your data and exit

more a.lis will show encrypted file

vi -x a.lis will ask for decryption key and then show the text in clear.

[j773303]

Once using vi -x to encrypt the file.
If formet the key, how to disable the vi() encryption file ?

another issue, does vi -x binary_file apply in BINARY file?

Thanks in advanced.

[Peter Godron]

Hi,
the point of cryptography is that the file can not be easily decoded. So if you forget your -x key, no easy way to recover file.

[RAC_1]

You can't edit binary files. Also, if you forget the key, you can not recover the file.

[j773303]

vi :X , KEY press "RETURN'
it can be back the file to normal

[j773303]

Is there any command to do the encryption/decryption for BINARY file ?

Thanks,

[Bill Hassell]

crypt does not care about the contents of a file. It will work on any file. NOTE: This is a pure filter, that is, it accepts no filenames for input or output, just the password. STDIN and STDOUT must be provided for in and out files. This demonstrates how it works:

cat /etc/fstab | crypt abcxyz > secure_file
cat -v securefile
cat securefile | crypt abcxyz

This encodes fstab, demonstrates that the new file is unreadable and then decrypts the file with the password abcxyz.

[Dave Olker]

Hi,

If you're looking for encryption of data "at rest", meaning the data is encrypted on the disk and then decrypted when your application accesses it then this is what you're looking for:

http://h20338.www2.hp.com/hpux11i/cache/324629-0-0-0-121.html

Eric Roseme, from HP, will be discussing EVFS in great detail at HP Technology Forum 2006 in September. There will be general sessions and a demo of the product.

Regards,

Dave

[j773303]

cat /etc/fstab | crypt abcxyz > secure_file
cat -v securefile
cat securefile | crypt abcxyz

for the above, if forgot the key, how to restore securefile to normal file?

[A. Clay Stephenson]

While the crypt algorithm is not all that robust by today's standards, essentially the answer is "forget the key, forget the file." Note that if the answer were anything different then the encryption would be of very limited value because the same techniques you use would be the ones that the bad guys would use also.