×× ×× ××××× ×××××× ×××××× ××× ×× ×× ×× ×× ×× ×× ×× × ×× ×× ×× ×× ×× ××××× ×× ××× ×× ×× ×× ×× ×× ×× ×× ××××× ×××××× ×××××× ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
--
Here is a quick, simple way to encrypt your files and the cool thing is that it’s available to anyone using Mac or Linux. This utility comes pre-installed on nearly all these systems, so you don’t need to download anything.
It’s name is OpenSSL, which you probably heard from with the heartbleed vunerability that hit the news early this year. Fortunately for us, this only affects OpenSSL when it’s doing network connected stuff (afaik), so everything here should be secure.
Ok, so what you’re going to need for this tutorial is access to the command line aka, the terminal. On macs it’s located in Applications > Utilites and on Linux it’s usually availble through the menu Applications > Accessories or something similar. Just look for the app named Terminal.
TIP: If you want to learn more about OpenSSL, open up terminal, type in “man openssl” (without quotes) and press enter. To exit press q
ENCRYPTING FILES
Make sure you have the terminal app open and you have the file you want to encrypt at hand. If you want to encrypt multiple files inside one encrypted container, it’s easier if you compress all these files into a .zip or something first.
In this example the file you want to encrypt will be on the desktop and so will the encrypted file.
Type the following into terminal (all on one line), then press enter. We’ll go over what each section means:
openssl aes-256-cbc -in ~/Desktop/File.jpg -out ~/Desktop/Encrypted.File
- “openssl”. This tells the terminal to start the openssl utility.
- “aes-256-cbc”. This is the encryption cipher we’ll be using for this example. There are many different ones to choose from. Find out more about them by typing ‘man openssl’ in your terminal window.
- “-in ~/Desktop/File.jpg”. This tells openssl that the input file (the one you want to encrypt) is File.jpg. If you don’t want to type out the full path for the file, you could just type “-in ” and drag the file into the terminal.
- “-out ~/Desktop/Encrypted.File”. This is the output file you will get. You can name it pretty much anything you like.It’s worth noting that you may run into problems if you name the output file the same as the input.
After you press enter, you’ll be asked to enter an encryption password, and then to verify it. Make sure it’s complex.
Now if you check your desktop, you should have a new “Encrypted.File” file sitting there. This is an encrypted version of your original File.jpg. These encrypted files are perfect for emailing and uploading to services like dropbox, since they’re cocooned and impenetrable to passive snooping.
DECRYPTING FILES
With a terminal window open, type the following and press enter:
openssl aes-256-cbc -d -in ~/Desktop/Encrypted.File -out ~/Desktop/File.jpg
You’ll notice that this is almost identical to the command for encrypting, except for a few things:
- “-d” is included which tells openssl you want to decrypt the file
- The “-in” file is now the Encrypted.File and the “-out” is the original File.jpg.
After you press enter it’ll ask for the decryption password. Enter it and your original file will be ready to use again.
AN EVEN EASIER WAY (for Mac)
If you don’t want to mess around in the command line, there’s a cool app my friend Steve Dekorte created. It’s called Crypt and it’s basically a GUI wrapper for the OpenSSL stuff we have been discussing, meaning you can drag and drop files and it takes care of everything else for you, without needing to use the command line. It’s free, open source and available in english, french and german. Check it out http://voluntary.net/crypt/
––
BY CHRIS ROBINSON