jell0zz
Posts: 12
Joined: Sun Mar 04, 2012 10:16 pm

Re: Securing your RasPi and external HDD's/USB drives.

Thu May 03, 2012 7:44 pm

Hey guys,

I was looking into the option to lock an external HDD or USB drive with just a simple password. Similar to how you use a password to log in to your user.

However, there seems to be no real solution. Almost every solution i have encountered needs a computer side client to unlock the client on the drive.

What I would love is a way to just plug in the drive, let the window pop up which tells you it is locked and it needs a password. Put it in, and the window gets unlocked.

Now, my question is, is there anything like that out there?

Locking your devices is something I believe is quite important as you wouldn't leave your house unlocked why would you leave your external hdd with personal finance information etc unlocked.

Cheers, Jelle

jamesh
Raspberry Pi Engineer & Forum Moderator
Raspberry Pi Engineer & Forum Moderator
Posts: 23059
Joined: Sat Jul 30, 2011 7:41 pm

Re: Securing your RasPi and external HDD's/USB drives.

Thu May 03, 2012 8:05 pm

For decent disk security you would really need whole disk encryption. Not sure what's available on Linux although PGP do something on Windows.
Principal Software Engineer at Raspberry Pi (Trading) Ltd.
Contrary to popular belief, humorous signatures are allowed. Here's an example...
"My grief counseller just died, luckily, he was so good, I didn't care."

jamesh
Raspberry Pi Engineer & Forum Moderator
Raspberry Pi Engineer & Forum Moderator
Posts: 23059
Joined: Sat Jul 30, 2011 7:41 pm

Re: Securing your RasPi and external HDD's/USB drives.

Thu May 03, 2012 8:05 pm

Forgot to add, if you only have a few files you want securing rather than the whole disk, try Truecrypt.
Principal Software Engineer at Raspberry Pi (Trading) Ltd.
Contrary to popular belief, humorous signatures are allowed. Here's an example...
"My grief counseller just died, luckily, he was so good, I didn't care."

jell0zz
Posts: 12
Joined: Sun Mar 04, 2012 10:16 pm

Re: Securing your RasPi and external HDD's/USB drives.

Thu May 03, 2012 8:24 pm

No, its really all about securing the entire drive.

Otherwise you would have to encrypt every single new file manually.

Where as if the drive is 'locked' its more like a cupboard with a lock on it, you can put anything in it and you just lock it so nobody can touch it without the key or password.

rmm200
Posts: 259
Joined: Sat Mar 03, 2012 10:25 pm

Re: Securing your RasPi and external HDD's/USB drives.

Thu May 03, 2012 8:27 pm

Best to make sure, if the drive is locked, every byte written is encrypted. Otherwise easy enough to stick a new controller board on the drive and have access to everything.

jell0zz
Posts: 12
Joined: Sun Mar 04, 2012 10:16 pm

Re: Securing your RasPi and external HDD's/USB drives.

Thu May 03, 2012 9:32 pm

rmm200 said:


Best to make sure, if the drive is locked, every byte written is encrypted. Otherwise easy enough to stick a new controller board on the drive and have access to everything.



haha, i just want my relatives to keep their hands of it.

and none of them will go that far

jamesh
Raspberry Pi Engineer & Forum Moderator
Raspberry Pi Engineer & Forum Moderator
Posts: 23059
Joined: Sat Jul 30, 2011 7:41 pm

Re: Securing your RasPi and external HDD's/USB drives.

Thu May 03, 2012 9:48 pm

You could just have one big truecrypt volume on the drive and put everything in that.
Principal Software Engineer at Raspberry Pi (Trading) Ltd.
Contrary to popular belief, humorous signatures are allowed. Here's an example...
"My grief counseller just died, luckily, he was so good, I didn't care."

jell0zz
Posts: 12
Joined: Sun Mar 04, 2012 10:16 pm

Re: Securing your RasPi and external HDD's/USB drives.

Thu May 03, 2012 10:07 pm

JamesH said:


You could just have one big truecrypt volume on the drive and put everything in that.



yea but that way truecrypt needs to be on all pc's right? and it deletes everything currently on the hdd right?

dukla2000
Posts: 190
Joined: Tue Jan 10, 2012 12:02 am
Location: Reading.UK.EU

Re: Securing your RasPi and external HDD's/USB drives.

Thu May 03, 2012 10:15 pm

Lots of Linux options. I haven't tried any of them but, for example, Ext4 has an option in the format to encrypt the partition.
Daily driver: Pi3B, 64GB Samsung Evo+ @100MHz, DVB-T, onboard WiFi for internet, BT/USB dongle for KB/mouse, 250GB HDD via USB for media, Raspbian Jessie Lite with Openbox desktop.
Museum: Pi B

User avatar
AndrewS
Posts: 3625
Joined: Sun Apr 22, 2012 4:50 pm
Location: Cambridge, UK
Contact: Website

Re: Securing your RasPi and external HDD's/USB drives.

Thu May 03, 2012 11:46 pm

jell0zz said:



However, there seems to be no real solution. Almost every solution i have encountered needs a computer side client to unlock the client on the drive.

What I would love is a way to just plug in the drive, let the window pop up which tells you it is locked and it needs a password. Put it in, and the window gets unlocked.


If you have no computer-side client installed, then what exactly do you expect this "pop-up window" to be displayed by??

Basically there's no such thing as a "simple lock" - you need to have everything on the drive encrypted, either with a "container" like TrueCrypt (or similar), or a "filesystem" like eCrpytfs (or similar).

I believe you can get external USB HDs where the encryption is all done by the drive-controller itself, in which case you wouldn't need client software, but these are usually very expensive.

After some googling I found http://blogs.computerworld.com.....ard_drives

Return to “General discussion”