Most Secure way to encrypt your usb stick ?

[lakschmi]

have sensitive data on your usb stick?

whats the best way to encrypt/decrypt it?

normally I use whonix-ws pgp and encrypt every file but Id rather have a different method

is there a way to install the tails os ecryption system in qubes os?
I prefere it over the whonix workstation system.

[7v5w7go9ub0o]

On 10/22/2016 12:09 PM, lakschmi wrote:
> have sensitive data on your usb stick?
>
> whats the best way to encrypt/decrypt it?
>
>
>
> normally I use whonix-ws pgp and encrypt every file but Id rather have a different method

I can't help you - sorry - but I suspect someone might ask:

1. Do you need to have individually-encrypted files?

2. If yes, are they the same key?

3. Would mounting the USB stick as an encrypted volume be satisfactory?

> is there a way to install the tails os ecryption system in qubes os?
> I prefere it over the whonix workstation system.
>

Can't help here either. But you might get some interesting replies if
you indicated WHY you would prefer tails over whonix - understanding
that R4.x may allow you to run the two whonix components as DispVMs.

[Manuel Amador (Rudd-O)]

On 10/22/2016 12:09 PM, lakschmi wrote:

Install gnome-disks on the template of whonix-ws (then power off
template, and power on the actual machine), then plug your USB, then use
qubes-manager to passthru the USB to your VM, then open gnome-disks.

From there you can format the disk with LUKS encryption and FAT32 inside
the encrypted container.

After doing so, every time you plug it back in, and pass it thru, just
open the file manager and click on the drive in the sidebar. This will
prompt you for your password and voila, decrypted.

--
Rudd-O
http://rudd-o.com/

[0137840913278409178243094213]

Hello lakschmi,

you might check out a poly morph encryption PMC, but this runs inside Win7 on the application layer.

http://www.pmc-ciphers.com/xcontent/Applications/TurboCrypt.html

http://www.pmc-ciphers.com/xcontent/Software-products/TurboCrypt-Disk-Encryption/1024-Bit-Encryption.html

Up to now, nobody can crack the 38 Bit challenge.

But if you like to see it one day on linux, you might imitate some donation, today it is running on windows only with 256 bit.

Kind Regards

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

My personal favorite is to use LUKS via the `cryptsetup` command. Documentation is available with `man cryptsetup`.

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=Idh/
-----END PGP SIGNATURE-----