15. Encryption

We've written about drakloop and mountloop, a couple of Mandriva programs that simplify the task of creating an encrypted container for your sensitive files. Here's a new article outlining how to do it in Ubuntu: Linux.com | Encrypt filesystems with EncFS and Loop-AES.

We've written about encryption in our newsletters on Freelock.com, but it looks like there are some new options available. EncFS is a Linux encryption system that encrypts individual files on the fly, rather than mounting a virtual "encrypted disk." Loop-AES looks like a new interface for Mandrake's Drakloop, which we've been using and recommending for years. Linux.com | Encrypt filesystems with EncFS and Loop-AES

Another very technical article. This one describes how to set up an infrastructure for securely providing single sign-ons to multiple systems in a LAN. Paranoid Penguin - Single Sign-on and the Corporate Directory, Part I | Linux Journal

For those who need to keep an archive of every sent or received in an organization, here's a brief story about how to create one securely and automatically.

NewsForge | Keeping email under lock and (public) key.

Books

• The Key To Rebecca, by Ken Follet, William Morrow, 1985.
• Crypto: How the Code Rebels Beat the Governement—Saving Privacy in the Digital Age, by Steven Levy, Penguin Group, 2001.
• Network Security with OpenSSL, by John Viega, Matt Messier, and Pravir Chandra O'Reilly, June 15, 2002

Articles

• "Securing Certificate Revocation List Infrastructures," by Eddie Turkaly

Softwar

PHPki Digital Certificate Authority is an open source project that provides a set of web pages for managing X.509 certificates for S/MIME email.