Hacker News new | ask | show | jobs
by Kovah 2361 days ago
Age looks somewhat promising, but I am still looking for a reasonable alternative to TrueCrypt. Encryption should be as easy as possible. The process of gathering your files (plural!), put them into a folder, zip or tar that folder and then encrypt it, to delete the remaining files afterwards, is anything but not easy. Adding new files is even more horrible. TrueCrypt was so easy, just select the encrypted file, enter your password and voila, you got a volume mounted where you can easily add or remove many files. I know that Veracrypt exists, but it does not feel like a solution for the next decade(s).

Its super weird. There is this use case to de/encrypt a single file, but mass storage of files in a secure way and without a proprietary protocol seems impossible.

3 comments

There are nice solutions on Linux: luks (encrypting partitions) and cryfs (encrypting directories)
There is also gocryptfs. It is written by some of the same people who did encfs and attempts to fix all the security issues discovered during its years of use.

https://github.com/rfjakob/gocryptfs

> and cryfs (encrypting directories)

Pretty sure that this leaks a lot of metadata.

No good without plausible deniability. It was that feature that got Truecrypt in trouble.
You mean like VeraCrypt?
I've been using VeraCrypt for a few years now, and have nothing bad to say about the experience - it's really easy to setup and operate.
rclone does that, you can mount an encrypted folder as a disc...