Mountable encrypted file? What to use?

[Roland Smith]

On Mon, Oct 12, 2009 at 06:33:40AM -0700, Greg Morell wrote:
> Since TrueCrypt doesn't work on FreeBSD, I'm wondering what you'd recommend for this:
> 
> I like to keep all of my sensitive stuff in a few encrypted mountable files.
> 
> Something where I can copy the file to a USB key for backup, but not worry if I lose the USB key since it's just an encrypted file.  But when on a computer, I can mount it as a volume.
> 
> On OS X, I use encrypted 'dmg' volumes.
> 
> On Linux and Windows, I use TrueCrypt.
> 
> What should I use on FreeBSD?

You should use GELI, see geli(8). It can encrypt complete disks, partitions or
bsdlabels. If you want the encrypted stuff encased in a file, you should use md(4)
to create a vnode-backed memory disk, and encrypt that with GELI.

Roland
-- 
R.F.Smith                                   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 196 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20091012/6945bb8e/attachment.pgp