[Bug 221684] Re: Support for the EFS subsystem of NTFS

[Szikra Istvan]

I would like this feature!

You need to do a couple of things to access NTFS EFS encrypted files:

Save NTFS EFS key (from windows)
Run this command (or see the links provided below or use Google):
cipher /x efsbackup.pfx

Access NTFS EFS encrypted files under Linux
you can try this:
ntfsdecrypt [options] -k efsbackup.pfx device [file]
(I couldn't make it work :( "Failed to open encrypted file.  Aborting.")
But I need something that decrypts files on the fly just like windows. It would be nice if I could for example specify the pfx certificate file as a mount option for ntfs-3g, and it would do the rest.   

Under Windows you just have to import the saved certificate.

---

"Just FYI:" you are an idiot :) Please read up before you start posting BS...
You can have 2 windows, you just have to export and import the EFS certificate (with private keys). (Otherwise you cannot even have 2 account that accesses the same encrypted files.)
There is also a Recovery Agent option...
You have an added risk of data loss due to encryption (loss off encryption key, forgetting password), You have to decide if it's too much. But you should always back up data no matter if it's encrypted or not...
You don't have to scan any registry, just have the EFS key exported.
Sure and the FBI is scanning your brainwaves right now... 

---

Some info about NTFS, EFS, FEK, certificates...

How EFS Works 
http://technet.microsoft.com/en-us/library/cc962103.aspx

Encrypting File System
http://en.wikipedia.org/wiki/Encrypting_File_System
http://technet.microsoft.com/en-us/library/cc700811.aspx
("Planning for and Recovering Encrypted Files"
"Cipher.exe Security Tool for the Encrypting File System")


How secure is NTFS encryption?
http://security.stackexchange.com/questions/8307/how-secure-is-ntfs-encryption

How to backup and restore Windows NTFS EFS certificates
http://mikebeach.org/2011/11/29/how-to-backup-and-restore-windows-ntfs-efs-certificates/
http://netsecurity.about.com/od/quicktips/qt/efs.htm	
How to back up the recovery agent Encrypting File System (EFS) private key in Windows
http://support.microsoft.com/kb/241201

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to ntfs-3g in Ubuntu.
https://bugs.launchpad.net/bugs/221684

Title:
  Support for the EFS subsystem of NTFS

Status in “ntfs-3g” package in Ubuntu:
  New

Bug description:
  Binary package hint: ntfs-3g

  Ubuntu has support for the NTFS file system.
  But it does not support the EFS (Encrypting File System) subsystem of NTFS.

  Add support for the EFS subsystem, so that we can use encrypted NTFS
  partitions too.

  http://www.ntfs-3g.org/support.html#compressed
  It is possible to sponsor the development.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ntfs-3g/+bug/221684/+subscriptions