eCryptfs

Can individual files and folders be decrypted?

Asked by Mike

I am testing BackupPC and when attempting to recover data, it is all encrypted:

/home
 .ecryptfs
 michael
 .ecryptfs
 .Private
 ECRYPTFS_FNEK_ENCRYPTED.FWY2fpg9Oi1R9ET7tnYlRhCm8qbMDqipAnag-hg&&GhjIUGIvHj--
 ECRYPTFS_FNEK_ENCRYPTED.FWY2fpg9Oi1R9ET7tnYlRhCm8qbMDqipAnagkjhkjhjKJHKUiyKB7aoX---
 ECRYPTFS_FNEK_ENCRYPTED.FWY2fpg9Oi1R9ET7tnYlRhCm8qbMDqipAnag1.91cMCJbPKkjhk&hcghfDFDy--
 ECRYPTFS_FNEK_ENCRYPTED.FWY2fpg9Oi1R9ET7tnYlRhCm8qbMDqipAnagIcIs5Ybdz6U19sdsf92taS3--

Is it possible to recover the filenames and contents individually? All the recovery options I've found refer to mounting the whole home partition, not individual files. I've run the following:

$ sudo ecryptfs-add-passphrase --fnek
[sudo] password for michael:
Passphrase:
Inserted auth tok with sig [key1] into the user session keyring
Inserted auth tok with sig [key2] into the user session keyring
$

But the next step is 'sudo mount -t ecryptfs ~/.Private ...' which seems to refer to the parent folder, not an individual file.

Second question:
What's the best-practice for backing up and recovering the encrypted home partition?

Question information

Language:
English Edit question
Status:
Solved
For:
eCryptfs Edit question
Assignee:
No assignee Edit question
Solved by:
Ted_Smith
Solved:
Last query:
Last reply:
Revision history for this message
Best Ted_Smith (tedsmith28) said : 		#1

Do these threads assist at all?

https://answers.launchpad.net/ecryptfs/+question/105733 where your question is asked, and which links to
https://answers.launchpad.net/ecryptfs/+question/104211

Revision history for this message
Mike (bild85) said : 		#2

Hi Ted, it sure does. And your remark at the end really hits home. :)
Cheers!
Mike

Revision history for this message
Mike (bild85) said : 		#3

Thanks Ted_Smith, that solved my question.

Revision history for this message
Ted_Smith (tedsmith28) said : 		#4

I agree Mike. eCryptfs is a great encryption system when everything is running smoothly, but restoring in the event of a system crash is still a bit tricky it seems to me.