[Wanted] Share / Folder Encryption

[Di4]

[Di4]

Hello. Heard about any progress?
A beta for 3.6 is not yet announced, isn't it?

[Golfer]

+1 !

The new firmware 3.6 is here viewtopic.php?f=161&t=53784, but eCryptFS is not mentioned.

Please, when will you implement it?
Especially NASses like my 219P+ where the drives have no lock might be easily stolen by a burglar, and I really would like to encrypt some shares with personal data. As schumaku says, the QNAP's Marvell CPUs support accellerated AES encryption and Synology offers this for quite a while.

[johnson407]

I just use truecrypt to create encrypted volumes on my 219. http://www.truecrypt.org/

works pretty well. you should look into that for the time being coz it doesn't look like qnap is committed to bring this feature to their nases

[Di4]

TrueCrypt is a great tool and would allow at least a workaround, yes. Perhaps it would even be faster when the PC does the encryption.
But doesn't it have some disadvantages here when multiple users access the NAS?
First, every computer (or user) in the network would need TrueCrypt, isn't it? And second, I think, every user has to enter the password every time you mount the drive - so at least every time you start your PC?

If the firmware would offer NAS-encryption, you would only enter the password once for all when the NAS is booted, until you restart it - right?
More comfortable IMHO, especially if some users should not bother with technical details, as my parents.

Do you think it's a matter of priorities or man-power? Is Synology bigger than QNAP?
At least QNAP offers many nice features, and some of them well before the competitors. I hope they will catch up here...

[bugyou2]

+1 !

I currently do NOT REALLY use my QNAP TS-212 because of missing encryption! Waiting / Hoping for future firmware releases...
It is may kinda ridiculous, but I prefer my data to be safe. I switched the large hard disks from the 212 with the small one from my computer and store all the files now on the large encrypted hard disk on my pc. Small hard disk which is now in the 212 in combination with a truecrypt volume. Not really a good solution, but a SECURE solution!

So why should I and other QNAP users store original data safe and secure on encrypted hard disk (at my/their pc) and at the same time using an QNAP ARM-based NAS with not encrypted hard disks to store the backup readable by everyone? Doesn't make sense at all should definitely be changed! I am (and others maybe as well) even happy with bad read/write performance if hard disk are encrypted in my 212 - but missing this feature at all may leads me to sell my almost new qnap and let some other solution (that was already mentioned somewhere across the forum) take place instead

[cfb]

+1, well it's really +1,000,000!

I only need a few GBs of folders/shares/directories encrypted out of the several TBs on my T239. It is also only these few folders that I want to replicate (rsync and/or RTRR) off-site to another qnap nas.

[Nexstar]

+1

I am new to (decent) home NAS, and should have researched encryption before I purchased a few weeks ago

Encryption was a significant driver for paying the significant extra $$$ to go to the 459 Pro II over lower models. Had I researched better I probably would have gone with Synology - especially if it doesn't appear to be coming any time soon....

I too am in the same boat of only needing certain portions of media encrypted.

[fantomas]

How exactly to you imagine the share to be encrypted/decrypted?
Do you need safety against stealing the NAS, but transferring the data through the network unencrypted?

[Di4]

Hello fantomas,
exactly: I want to have the data protected if somebody steals the complete NAS or the hard drives.

For this, I would like to enter the password for a single share in a comfortable way: web browser or smartphone app? (Please not to deep in the menus... )
As soon as one user has decrypted the share, all users with the right file system privileges are allowed to access the data - until the NAS is turned off (regular shutdown or brutal power off). Perhaps an option would be nice to encrypt it again without turning off the NAS?

The encryption of the transmission over network is no problem in my opinion. Typically you inside your LAN, and if necessary, you can use SFTP etc.

[fantomas]

Hello fantomas,
exactly: I want to have the data protected if somebody steals the complete NAS or the hard drives.

For this, I would like to enter the password for a single share in a comfortable way: web browser or smartphone app? (Please not to deep in the menus... )
As soon as one user has decrypted the share, all users with the right file system privileges are allowed to access the data - until the NAS is turned off (regular shutdown or brutal power off). Perhaps an option would be nice to encrypt it again without turning off the NAS?

The encryption of the transmission over network is no problem in my opinion. Typically you inside your LAN, and if necessary, you can use SFTP etc.

this looks like mounting filesystem on an encrypted file, with providing password by client on first access.
That can be done by loop-aes, cryptsetup or similar.

[Di4]

What are the differences compared to something like eCryptfs?
Do loop-aes etc. require to create a file of a static size in advance?

Opinions from the others?

Bye.

[illidan155]

+1

[johnripper]

+1

[Di4]

With "opinions", I didn't mean "Do you want encryption?" but "Which solution would you prefer?"

I just looked up the encryption of shared folders in the Synology manual. There, you have to define a password, but seemingly no need to create a container file of a certain size in advance.