Encrypt your disks on Linux
GocryptFS
Another state-of-art tool for encrypted disks on Linux is GocryptFS [3]. GocryptFS also owes its existence to an earlier system that lost its shine for the FOSS community: EncFS.
EncFS came under fire when something happened to it during an audit that should never happen to an encryption solution. The testers detected a vulnerability in the source code that, in the worst case, allowed the key used for encryption to be computed. This danger existed with EncFS especially when attackers got their hands on several versions of the encrypted container. The actual key could then be found out by simple matching and an exclusion procedure. Basically, since this incident, EncFS has been under fire from everyone concerned with security and encryption (Figure 4).

However, Austrian Jakob Unterwurzacher found the idea behind EncFS so convincing that he set about creating a new implementation. In doing so, he worked with the Go programming language, which not only explains the program's name, but also translates to considerable speed advantages in practice compared to the previously used C++. The use of FUSE remains unchanged, so GocryptFS (Figure 5) can be used on any Linux system with an activated FUSE environment.

Because FUSE is also available for Windows, GocryptFS also works on Windows systems. With its own wrapper, however, the solution goes by the name of CppcryptFS, and, as the name suggests, the Windows version of GocryptFS is written in C++ instead of Go. MacOS users are less fortunate: macFUSE does exist, but it is not available under a free license. The FOSS community therefore tends to avoid the tool. In the meantime, however, an alternative has been devised that takes GocryptFS to macOS, too, although some special functions have been dropped.
If you don't want to use GocryptFS on the command line, you can turn to SiriKali, which offers a graphical user interface for GocryptFS and its predecessor EncFS.
What GocryptFS Offers
As described, GocryptFS always creates complete, encrypted containers in a file or on a disk. Basically, GocryptFS is designed as an overlay file system. In normal operating mode, you enable a GocryptFS container, write something to it, disable the container again, and then the encrypted content appears as such on the underlying file system. Creating a GocryptFS overlay is quick and easy with the help of the documentation.
GocryptFS offers a second option, known as reverse mode, for storage targets that are implicitly insecure. If you want to store your backups in the cloud, for example, you can activate reverse mode in GocryptFS. Reverse mode exposes the encrypted data directly so that you can copy it to another location.
GocryptFS is about as simple as Veracrypt, however, GocryptFS offers a clear speed advantage. At least subjectively, there are considerable differences when encrypting, and these differences are despite the fact that Veracrypt and GocryptFS support acceleration for the various crypto algorithms in the same way. If you want to manage encrypted data, you will definitely want to take a look at GocryptFS.
Universal GUI: Zulucrypt
The final candidate in this encryptors showcase is a program that does not actually do the encryption work itself. Zulucrypt [4], together with Zulumount, which is included with it, is more concerned with organizing the proliferation of encryption methods available under Linux.
Zulucrypt (Figure 6) promises to unify classic crypt setups with LUKS, Veracrypt, and GocryptFS in a single interface. First and foremost, it is a GUI that integrates and calls the other tools in the background.

Zulucrypt is extremely user-friendly. The tool is included with most of the popular Linux distributions and can otherwise easily be installed via the provider's website. Immediately after that, the main window of Zulucrypt reveals how powerful the tool actually is.
In Zulucrypt, you can either create or open LUKS devices with Cryptsetup, create Veracrypt volumes or use existing ones, and mount file systems via FUSE with GocryptFS. Unmounting works in the same way. Zulucrypt relieves the user of the need to deal with the details of the CLI or GUI applications of the individual solutions. Nevertheless, it does not hurt to at least be familiar with the basic features of the individual programs, in case something goes wrong in Zulucrypt that the program itself cannot fix. In everyday operations, however, this kind of incident is likely to be an exception.
All in all, Zulucrypt is a powerful little helper that saves admins a part of the learning curve and efficiently reconciles different encryptors under Linux. Zulucrypt is especially beneficial for people who use, or have to use, more than one encryption solution.
« Previous 1 2 3 4 Next »
Buy this article as PDF
(incl. VAT)
Buy Linux Magazine
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Subscribe to our ADMIN Newsletters
Support Our Work
Linux Magazine content is made possible with support from readers like you. Please consider contributing when you've found an article to be beneficial.
News
-
The GNU Project Celebrates Its 40th Birthday
September 27 marks the 40th anniversary of the GNU Project, and it was celebrated with a hacker meeting in Biel/Bienne, Switzerland.
-
Linux Kernel Reducing Long-Term Support
LTS support for the Linux kernel is about to undergo some serious changes that will have a considerable impact on the future.
-
Fedora 39 Beta Now Available for Testing
For fans and users of Fedora Linux, the first beta of release 39 is now available, which is a minor upgrade but does include GNOME 45.
-
Fedora Linux 40 to Drop X11 for KDE Plasma
When Fedora 40 arrives in 2024, there will be a few big changes coming, especially for the KDE Plasma option.
-
Real-Time Ubuntu Available in AWS Marketplace
Anyone looking for a Linux distribution for real-time processing could do a whole lot worse than Real-Time Ubuntu.
-
KSMBD Finally Reaches a Stable State
For those who've been looking forward to the first release of KSMBD, after two years it's no longer considered experimental.
-
Nitrux 3.0.0 Has Been Released
The latest version of Nitrux brings plenty of innovation and fresh apps to the table.
-
Linux From Scratch 12.0 Now Available
If you're looking to roll your own Linux distribution, the latest version of Linux From Scratch is now available with plenty of updates.
-
Linux Kernel 6.5 Has Been Released
The newest Linux kernel, version 6.5, now includes initial support for two very exciting features.
-
UbuntuDDE 23.04 Now Available
A new version of the UbuntuDDE remix has finally arrived with all the updates from the Deepin desktop and everything that comes with the Ubuntu 23.04 base.