如何使用Boxcryptor加密基于云的驱动器-CSDN博客

The security debacle at Dropbox last week opened a lot of peoples’ eyes to the need for user-managed encryption for cloud-based storage. Read on to learn how to secure your Dropbox (and other cloud-based files) with Boxcryptor.

上周在Dropbox上发生的安全事故使很多人开始关注基于云存储的用户管理加密的需求。继续阅读以了解如何使用Boxcryptor保护Dropbox(以及其他基于云的文件)。

为什么要在云存储上增加额外的安全性？ (Why Layer Additional Security Onto Your Cloud Storage?)

On June 19 there was a four-hour security glitch at Dropbox. During that four-hour period anyone could log into any account with any password. If someone knew the email you used to login they could supply any password at all and it would work. Essentially it didn’t matter how powerful the encryption scheme Dropbox was using to secure your files was as the security flaw temporarily allowed anyone to login to your account and be authenticated as though they were you—a procedure that would bypass the strongest encryption in the world since the system believed the interloper was a valid user on the account.

6月19日，Dropbox发生了四个小时的安全故障。在这四个小时内，任何人都可以使用任何密码登录任何帐户。如果有人知道您用来登录的电子邮件，他们可以提供任何密码，这样就可以了。本质上，Dropbox用来保护文件安全的加密方案并不重要，因为安全漏洞暂时允许任何人登录到您的帐户，并像他们一样通过身份验证。此过程将绕过安全性最强的加密程序。由于系统认为闯入者是该帐户的有效用户，因此无法访问。

So what can you do? Not used cloud-based storage at all? That’s an option but many people enjoy using Dropbox and the majority of their files are music, media files, and other non-critical files. Rather than quit using Dropbox (or other cloud-based storage drives) you can easily and selectively secure files within your Dropbox so that even if the account is compromised the intruder would still need to decrypt your heavily encrypted files.

所以，你可以做什么？根本不使用基于云的存储吗？这是一个选择，但是许多人喜欢使用Dropbox，并且他们的大多数文件是音乐，媒体文件和其他非关键文件。无需退出使用Dropbox(或其他基于云的存储驱动器)，您就可以轻松，有选择地保护Dropbox中的文件，以便即使帐户遭到破坏，入侵者仍需要解密您的高度加密的文件。

使用BoxCryptor保护Dropbox (Securing Dropbox with BoxCryptor)

Although many people simply keep an encrypted volume within their Dropbox (like a TrueCrypt volume) doing so semi-defeats the purpose of having a remote cloud-based drive that continually updates and saves your files. When using a large encryption volume Dropbox will only upload the volume when the volume is umounted. Any time you’re inside the volume working and changing files you lose the continual backup feature.

尽管许多人只是将加密卷(如TrueCrypt卷)保留在其Dropbox中，但这样做的目的是半途而废的，因为远程基于云的驱动器会不断更新并保存文件。当使用较大的加密卷时，Dropbox仅在卸载卷后才会上载该卷。每当您在卷中工作和更改文件时，都将失去连续备份功能。

For files that you wish to encrypt, with minimal fuss and with the ability to open and manipulate individual files, while maintaining the benefit of continual backups, BoxCryptor is a dead simple solution. BoxCryptor is a Windows-based solution for file-by-file encryption using AES-256 bit encryption. It is compatible with the Encrypted Filesystem (EncFS) and thus your BoxCryptor encrypted files can be accessed on Mac OS X and Linux computers.

对于希望加密的文件而言，BoxCryptor是一个简单的解决方案，它可以最大限度地减少麻烦，并具有打开和操作单个文件的能力，同时又能保持连续备份的优势。 BoxCryptor是基于Windows的解决方案，用于使用AES-256位加密的逐个文件加密。它与加密文件系统(EncFS)兼容，因此可以在Mac OS X和Linux计算机上访问BoxCryptor加密的文件。

If you plan on using BoxCryptor with a Mac OS X computer make sure to check out this detailed guide. If you plan on using it with a Linux computer make sure to check out this guide. The remainder of our guide will be concerned with securing a Dropbox account using BoxCryptor from a Windows machine.

如果您打算在Mac OS X计算机上使用BoxCryptor，请确保查看此详细指南。如果打算在Linux计算机上使用它，请确保阅读本指南。我们指南的其余部分将涉及如何使用Windows计算机上的BoxCryptor保护Dropbox帐户。

安装和配置BoxCryptor (Installing and Configuring BoxCryptor)

The installation process for BoxCryptor is quite straight forward. BoxCryptor comes in three flavors. The free version allows you to encrypt a directory up to 2GB in size. The Unlimited Personal version costs $20 and allows for unlimited directory size. The Unlimited Business is $50 and simply a commercially licensed version of the Unlimited Personal version.

BoxCryptor的安装过程非常简单。 BoxCryptor有三种口味。免费版本允许您加密目录最大2GB。 Unlimited Personal版本的价格为20美元，并允许无限制的目录大小。 Unlimited Business的价格为50美元，仅是Unlimited Personal版本的商业许可版本。

Download the installation file here. We’ll be using the free version as we only need to secure a small volume of files. Run the installation file and follow the prompts. BoxCryptor will automatically detect if you have Dropbox installed on the computer and will ask you if you want to place the BoxCryptor directory in your Dropbox folder. Click Yes.

在此处下载安装文件。我们将使用免费版本，因为我们只需要保护少量文件即可。运行安装文件，然后按照提示进行操作。 BoxCryptor将自动检测您是否在计算机上安装了Dropbox，并询问您是否要将BoxCryptor目录放置在Dropbox文件夹中。单击是。

The only time you’ll need to pay close attention is when you reach this screen:

您唯一需要密切注意的时间是到达此屏幕时：

Here you need to check to make sure BoxCryptor properly placed your directory within your Dropbox folder system. You also need to select a drive letter for BoxCryptor to mount a virtual drive. We selected Z.

在这里，您需要检查以确保BoxCryptor将目录正确放置在Dropbox文件夹系统中。您还需要为BoxCryptor选择驱动器号以挂载虚拟驱动器。我们选择了Z。

You can leave the Advanced Mode options alone unless you use Dropbox’s file versioning feature. By default BoxCryptor encrypts the filenames. This filename encryption is a nice security boost but it breaks the file versioning system in Dropbox. If this will be an issue for your workflow make sure to check Advanced Mode and turn off the file name encryption. If you do not use the file versioning and will not need to rely on filenames to download your encrypted files through the web interface it is best to leave the file names encrypted.

除非您使用Dropbox的文件版本控制功能，否则您可以单独保留“ 高级模式”选项。默认情况下，BoxCryptor加密文件名。这种文件名加密可以很好地提高安全性，但会破坏Dropbox中的文件版本控制系统。如果这是您的工作流程中的问题，请确保选中“ 高级模式”并关闭文件名加密。如果您不使用文件版本控制，并且不需要依靠文件名通过Web界面下载加密文件，则最好将文件名保留为加密状态。

If you should decide at a later date that you wish to remove the filename encryption (or enable it) you can use BoxCryptor Control (a small command line tool) to toggle the setting. You can read more about this technique here.

如果您日后决定要删除(或启用)文件名加密，则可以使用BoxCryptor Control(一个小的命令行工具)来切换设置。您可以在此处阅读有关此技术的更多信息。

In the final step you will assign a password to your BoxCryptor volume. Choose a strong password. It’s up to you whether or not you want BoxCryptor tor remember the password. We opted to have it remember the password since our goal is to remotely secure the files not locally secure them (if someone has access to our physical computer to the degree that this password being remembered or not is our last line of defense we have bigger problems to deal with).

在最后一步中，您将为BoxCryptor卷分配一个密码。选择一个强密码。是否要让BoxCryptor记住密码由您决定。我们选择让它记住密码，因为我们的目标是远程保护文件而不是本地保护文件(如果有人可以访问我们的物理计算机，以至于记住或不记住此密码是我们的最后一道防线，那么我们会遇到更大的问题处理)。

At this point you should see the BoxCryptor folder (or whatever alternate folder name you selected) within your Dropbox folder. You should also see the virtual drive in your list of drives (in our case, Drive Z). There are two very important rules you need to follow going forward. First, do not put files directly into the BoxCryptor folder. If you place files directly into the folder they will not be encrypted. They will simply be regular files like those found in another other folder in your Dropbox directory. Second, do not delete the encfs6.xml file in the BoxCryptor folder. That file holds important information that helps BoxCryptor decrypt your files, deleting it renders BoxCryptor useless and your files permanently encrypted.

此时，您应该在Dropbox文件夹中看到BoxCryptor文件夹(或您选择的任何其他文件夹名称)。您还应该在驱动器列表中看到虚拟驱动器(在本例中为Drive Z)。继续需要遵循两个非常重要的规则。首先， 不要将文件直接放入BoxCryptor文件夹 。如果将文件直接放入文件夹，则不会对其进行加密。它们将只是常规文件，就像在Dropbox目录的另一个其他文件夹中找到的文件一样。其次， 不要删除BoxCryptor文件夹中的encfs6.xml文件 。该文件包含有助于BoxCryptor解密文件的重要信息，将其删除会使BoxCryptor变得无用，并且文件将被永久加密。

In fact it is best you never even go into the BoxCryptor folder directly, only use the mounted volume. Speaking of that mounted volume, let’s dump some files into it and see what happens.

实际上，最好甚至不要直接进入BoxCryptor文件夹，而仅使用装入的卷。说到安装的卷，让我们将一些文件转储到其中，看看会发生什么。

In the above screenshot we’ve just dumped files into the Z drive, BoxCryptor’s virtual drive. We can work within this drive like we would any other drive on our computer. Files are encrypted and decrypted on the fly and any changes we make to individual files will be shortly reflected in the contents of our Dropbox account.

在上面的屏幕截图中，我们只是将文件转储到BoxCryptor的虚拟驱动器Z驱动器中。我们可以像在计算机上的任何其他驱动器一样在该驱动器中工作。文件会实时加密和解密，我们对单个文件所做的任何更改都会很快反映在我们Dropbox帐户的内容中。

What does it look like in the BoxCryptor folder now? Let’s take a peek.

现在在BoxCryptor文件夹中是什么样的？让我们来看看。

Each file has been individually encrypted by BoxCryptor and, as evidenced by the green check marks, already uploaded to Dropbox. The majority of our Dropbox account, which contains MP3s, ebooks, and other non-personal files, remains unencrypted while the BoxCryptor directory enjoys strong file-by-file AES-256 encryption.

每个文件均已由BoxCryptor单独加密，并且已通过绿色复选标记证明已经上传到Dropbox。我们的大部分Dropbox帐户(包含MP3，电子书和其他非个人文件)仍未加密，而BoxCryptor目录则采用逐文件AES-256加密技术。

If you have additional questions about BoxCryptor you can hit up their FAQ file, check out their blog, or visit their feedback forum. Have experience with BoxCryptor, EncFS, or other file-by-file encryption tools and cloud-based storage? Let’s hear about it in the comments.

如果您对BoxCryptor还有其他疑问，可以访问其 FAQ文件，查看其博客或访问其反馈论坛。有使用BoxCryptor，EncFS或其他逐个文件加密工具和基于云的存储的经验吗？让我们在评论中听到它。