NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
ReadyNAS encryption implementation
Hi there, I was wondering what kind of encryption the ReadyNAS use? is it Luks? What is the performance impact expected on an old Pro 6 running a E6600 and 4GB of RAM? Thanks Tony
StephenB wrote:You can also do incremental file backups from a PC that is accessing the veracrypt volume. Back up to an encrypted drive (or an encrypted cloud storage) of course. ReadyDR is backing up the encrypted container, so in that case there is no need to encrypt it again.
But doing that requires that the Veracrypt volume be mounted. If the backup is automatic, then making sure the Veracrypt volume is mounted at that time significantly reduces the effectiveness of having an encrypted volume at all, though I guess not to less than the effectiveness of an encrypted ReadyNAS volume.
I use iDrive for backing up my NAS and it's been working fine for now.
I only wanted to make sure my data was safe in case the NAS was stolen - or even hacked.
I was recommended Cryptomator - I believe it works similarly to Veracrypt, maybe one difference is that Cryptomator encrypt each file and does not create a big, large file?
An encrypted volume will not help if the NAS is hacked because the encrypted volume would be unlocked. It would help in the case of theft if the thief didn't also steal the USB key, or at least didn't know what it was (meaning you need to not mark it and remember to remove it after every boot).
Cryptomator seems like it acts a lot like VeraCrypt, in that it calls what it creates a "vault", then goes on to say the files are separately enmcrypted. Seems self-contradictory to me. But it does seem to have an advantage of multiple users accessing the same vault (just not the same files). It is also clearly aimed at DropBox, It may work on a NAS, but they don't cover that on their basic web pages.
You can, of course, create (and mount simultaneously) multiple Veracrypt volumes if you want to separate files of different tyupoes and keep individual volume sizes down.
thanks for all your input. Appreciated.
Sandshark wrote:
Cryptomator seems like it acts a lot like VeraCrypt, in that it calls what it creates a "vault", then goes on to say the files are separately encrypted. Seems self-contradictory to me.
I don't think it's really contradictory, but it is likely an unneeded detail on how the encryption is done.
- BitLocker encrypts blocks of raw storage
- Cryptomator encrypts files
- ???
The Cryptomator folks seem to be comparing their method with another (unnamed) one that encrypts the full container as an atomic unit - requiring the entire repository to be completely re-encrypted if anything in the repository is updated. I don't think many tools would do that (since it is clearly suboptimal). But some tools might work that way.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
