Encrypted Sparse Images

sourceninja

Diamond Member
Mar 8, 2005
8,805
65
91
I can't find this answer anywhere, so I thought I'd ask it here.

My wife and I have decided we wanted to improve our important documents backup process. Originally this process was that all important documents (tax and bank stuff) was copied on to a USB stick and placed in our fireproof safe, a second truecrypt encrypted disk was kept in my wife's purse. A 3rd copy was placed on my storage server.

Now that she is no longer using windows, we changed the method to as follows, a copy is placed on a USB stick in our fireproof safe. A copy is backed up by time machine. Another copy is automatically sent via ssh to my notebook and placed on my time machine (separate usb drives).

What we wanted to improve was the usb key in my wife's purse. This is to help us if say the fireproof safe was not fireproof and the house burned down. The idea was hopefully she will have her purse with her (and not be home). This is the weak link.

Because these files are way way less then 2 gig, my solution was dropbox. I know that dropbox uses 256 bit encryption, but I have no reason to trust they would never look at my data. The obvious solution is to make a sparse image that is encrypted. So I created this sparse image and set it's max size to 1.9g (to insure we never break the 2 gig free limit) and for security purposes I use AES-256 encryption on the image.

All has been well with this process, until my wife asked me what would happen if we did not have a mac and needed to get to the files. Say our house burned down with both macs inside and no one we know has a mac (which is true). How do we get the data from the dmg file.

A quick google shows there is a program called DMGExtractor that can read AES-128 encrypted dmg files, but it does not say it supports AES-256. So my question is does anyone know a program that can read AES-256 encrypted DMG sparse images on Windows or even better on Linux.

If such a program does not exist, do you think it would be wise to instead use a TrueCrypt container for this purose?
 

ViRGE

Elite Member, Moderator Emeritus
Oct 9, 1999
31,516
167
106
Can you not use AES-128 on the DMG instead? Even 128bit AES is perfectly fine for what you want to do. Otherwise I don't see a problem with TrueCrypt. It's a bit unwieldy, but it's secure.

You could also take a look at using AES encryption on ZIP files, I believe several compression utilities now support it.

 

sourceninja

Diamond Member
Mar 8, 2005
8,805
65
91
I thought of using zips, but I don't want the hassle compared to a disk image. A disk image is just a double click and it mounts (in osx). No need to deal with applications. You can drag and drop right in finder, and you can even mount via command line over ssh. A zip would take a lot of that away.

I'm leaning more to Truecrypt. I could do a AES-128 DMG, but I think truecrypt will be all around better. No worries about support on the 3 big OSes and no chance apple will do some kind of update that makes it incompatible.