meta data for this page

File level encryption

FUSE based

  • cryfs - encrypt your files and store them in the cloud https://www.cryfs.org.
  • encfs - EncFS integrates file system encryption into the Unix(TM) file system. Encrypted data is stored within the native file system, thus no fixed-size loopback image is required. EncFS uses the FUSE kernel driver and library as a backend.
  • gocryptfs - Encrypted overlay filesystem written in Go. gocryptfs is built on top of the excellent go-fuse FUSE library and its LoopbackFileSystem API. This project was inspired by EncFS and strives to fix its security issues while providing good performance.
  • securefs - Filesystem in userspace with transparent authenticated encryption. securefs mounts a regular directory onto a mount point.

Kernel

  • fscrypt - Tool for managing Linux filesystem encryption. To use fscrypt, you must have a filesystem with encryption enabled and a kernel that supports reading/writing from that filesystem. Currently, ext4, F2FS, and UBIFS support Linux filesystem encryption.