- Umehluko omkhulu phakathi kokubethela amafayela ngamanye kanye nokubethela amavolumu aphelele ukuze kuvikelwe ngokuphelele.
- Amakhono e-VeraCrypt ahlanganisa amapulatifomu amaningi uma kuqhathaniswa nokuhlanganiswa kweBitLocker kwemvelo ezindaweni zeWindows.
- Ukubaluleka kokuphathwa kokhiye bokubuyisa ukuze kugwenywe ukulahleka okungenakuguqulwa kwedatha ebethelwe.
Ezweni lanamuhla, ulwazi esilugcina kumadivayisi ethu cishe luwukubonakaliswa kwezimpilo zethu zangasese. Kusukela ezithombeni zohambo lwethu lokugcina kuya kumadokhumenti omsebenzi ayimfihlo, konke kunenani elikhulu, yingakho ukuvikela ubumfihlo bedatha sekube yinto eza kuqala kunoma ubani ongafuni ukubeka engcupheni ukuphepha kwakhe kwedijithali.
Uma wake wazibuza ukuthi ungamvimbela kanjani umuntu onelukuluku noma umuntu ononya ukuthi angafinyeleli amafayela akho uma ulahlekelwa yi-USB drive noma i-laptop yakho yebiwe, ufike endaweni efanele. Sizobheka ngokujulile amathuluzi anamandla kakhulu okubethela idatha ku-hard drive , sigxile ezixazululweni eziqinile neziguquguqukayo ezizokunikeza ukuthula kwengqondo.
I-VeraCrypt: Umlandeli onamandla futhi oguquguqukayo
Ukuze siqonde i-VeraCrypt, sidinga kuqala ukubheka emuva sixoxe nge-TrueCrypt. Le software yabusa isikhathi eside, kodwa ngo-2012 abadali bayo banquma ukuyishiya, baze baxwayisa ngamaphutha okuphepha angakalungiswa . Abantu abaningi basola ukuthi izinhlangano ezifana ne-FBI noma i-NSA kungenzeka ukuthi zithonye ukuvalwa kwayo ngoba uhlelo belusebenza kahle kakhulu ekufihleni idatha.
Njengoba ibhekene nalesi sikhala, i-VeraCrypt yavela njengesisekelo sephrojekthi yokuqala. Ayigcinanga nje kuphela ukusebenza okuyinhloko kodwa futhi iyilungisile, yengeza ama-algorithms amasha okubethela alinganayo kanye nemisebenzi ye-hashing ethuthukisa kakhulu ukusebenza. Okuhle kunakho konke, iyi -cross-platform , esebenza kahle ku-Windows, macOS, kanye ne-Linux.
Enye yezinzuzo zayo ezinkulu yikhono lokudala izitsha zamafayela ezibethelwe . Ngokuyisisekelo, udala ifayela elisebenza njenge-virtual safe; ulifaka nohlelo, ufake noma yini oyifunayo ngaphakathi, futhi uma ulikhipha, liba ifayela elingafundeki futhi kunoma ubani ongenalo ukhiye.
Izici kanye nokusebenza kwe-VeraCrypt
I-VeraCrypt ayikhawulelwe ezitsheni. Iphinde ivumele ukubethela kwamadivayisi asusekayo njengamakhadi e-SD, ama-USB drive, nama-hard drive angaphandle. Kulesi simo, uhlelo lokusebenza luzokutshela ukuthi idiski idinga ukufomethwa, kodwa qaphela: unganaki lokhu bese ukhansela ukusebenza ukuze uyivule kahle usebenzisa ithuluzi lokubethela.
Uma ufuna izinga eliphezulu lokuphepha, leli thuluzi linikeza ukudala amavolumu afihliwe . Lokhu kuyasiza ekuvimbeleni ukusongelwa noma ukuphangwa; unganikeza iphasiwedi yevolumu "ejwayelekile" equkethe idatha engafanele, kuyilapho amafayela akho abalulekile egcinwa kuvolumu engabonakali okungekho muntu owaziyo ukuthi ikhona. Qaphela nje ukuthi ungabhali ngaphezulu isikhala esabelwe ivolumu efihliwe lapho ugcwalisa evamile.
Ngokusebenza kahle, uma iprosesa yakho inobuchwepheshe be-AES-NI (ukusheshisa ihadiwe) , isivinini sokufunda nokubhala sibi kakhulu, sifinyelela izibalo ezidlula i-10 GB/s kuhadiwe yesimanje, okwenza ukubethela kube sobala kumsebenzisi.
Umhlahlandlela wesinyathelo ngesinyathelo wokubethela amavolumu
Ukuze uqale, kufanele ulande isofthiwe kuwebhusayithi yayo esemthethweni. Ngesikhathi sokufaka, ungakhetha imodi "ephathekayo", efaneleke kakhulu kuma-USB drive , njengoba ikuvumela ukuthi uphathe uhlelo ku-partition engabethelwe futhi ulusebenzise kunoma iyiphi ikhompyutha ngaphandle kwesidingo sokufaka noma yini.
Ukuze udale ivolumu ejwayelekile, iya ku-"Dala ivolumu" bese ukhetha isitsha sefayela. Kuzodingeka ukhethe i -algorithm yokubethela (i-AES iyanconywa njengoba kuyiyona ejwayelekile) kanye ne-algorithm ye-hashing (njenge-SHA-512 noma i-SHA-256). Bese, chaza iphasiwedi kanye nesistimu yefayela; sebenzisa i-exFAT noma i-NTFS uma uhlose ukugcina amafayela amakhulu kuno-4 GB.
Uma ufuna ukubethela yonke idrayivu yangaphandle, khetha okuthi "Encrypt partition/secondary drive." Unezinketho ezimbili: ukufometha idrayivu kusukela ekuqaleni (ngokushesha kakhulu) noma ukubethela ngenkathi ulondoloza idatha , okuyinqubo ehamba kancane kakhulu ngoba icubungula ulwazi olukhona.
Ukuze ubhale ngemfihlo lonke uhlelo lokusebenza, iya ku-"Encrypt the whole system partition/drive." Lesi sinyathelo sibucayi, ngakho-ke kubalulekile ukudala ikhophi yasenqolobaneni ngaphambi kokusebenzisa amathuluzi afana ne -Macrium Reflect for disk cloning . Uma i-algorithm kanye nokhiye sekulungisiwe, uhlelo luzoqala kabusha futhi lukutshele iphasiwedi ngaphambi kokuqalisa ku-Windows.
I-BitLocker nezinye izindlela ezihlanganisiwe
Uma usebenzisa izinguqulo ze-Pro noma ze-Enterprise ze-Windows, i-BitLocker yakhelwe ngaphakathi . Iyona ndlela elula kakhulu ngoba uyayisebenzisa bese uyikhohlwa; ibhala yonke ivolumu futhi iziphathe cishe ngokuzenzakalelayo. Nakuba iyisofthiwe eyimfihlo futhi ingenakuguquguquka njenge-VeraCrypt, isebenza kahle kakhulu ekuvikeleni i-laptop yakho ekwebiweni ngokomzimba usebenzisa i-BitLocker To Go.
Ezweni le-Mac, ithuluzi elifanayo yi -FileVault 2 , esebenzisa ukubethela kwe-XTS-AES-128. Njenge-BitLocker, iqinisekisa ukuthi akekho ongafinyelela i-hard drive ngaphandle kweziqinisekiso zomsebenzisi noma ukhiye othize wokutakula, okwenza kube wusizo ukwazi ukuthi ungayivula kanjani idiski ye-APFS ebethelwe.
Uma udinga ukuvikela ifolda ethile kuphela, kunezinketho ezilula. I-Windows ikuvumela ukuthi ubhale phansi okuqukethwe okuvela ezicini ezithuthukisiwe zefolda, yize lokhu kuvikela kuphela kwabanye abasebenzisi ku-PC efanayo. Enye indlela ephephile nejwayelekile ukusebenzisa i-7-Zip ukudala amafayela acindezelwe avikelwe ngephasiwedi anokubethela kwe-AES-256, okulungele ukuthumela amadokhumenti nge-imeyili.
Ukuxazulula izinkinga kanye nokubuyisa idatha
Ukwesaba okukhulu lapho ubhala ngemfihlo idatha ukulahlekelwa iphasiwedi. Endabeni ye-BitLocker, kubalulekile ukulondoloza iphasiwedi. ukhiye wokutakula endaweni ephephile noma ehlobene ne-akhawunti yakho ye-Microsoft. Uma idrayivu ikhiyiwe, ungazama ukusebenzisa umyalo (i-PowerShell njengomlawuli) ngokusebenzisa manage-bde –unlock kulandelwe indlela eya kufayela lakho le-.bek key.
Uma inkinga iqhubeka, iMicrosoft inikeza ithuluzi repair-bde ukuzama ukubuyisa idatha kusuka kuvolumu eyonakele. Ku-VeraCrypt, ngeshwa, uma ulahlekelwa iphasiwedi yakho futhi ungenayo ikhophi yasenqolobaneni, idatha ayitholakalingoba isofthiwe yakhelwe ngokunembile ukuze kungabikho muntu ongangena ngaphandle kwesihluthulelo.
Izinhlelo ze-Linux kanye nokubethela ku-Ubuntu
Abasebenzisi be-Ubuntu akudingeki bafake izinhlelo zangaphandle ukuze bavikele idrayivu ye-USB. Uhlelo luhlanganisa ithuluzi elithi "Amadiski", lapho ungafometha khona ivolumu ngokukhetha ukubethela okuhambisana ne-Linux (LUKS + Ext4) . Mane nje unikeze iphasiwedi eqinile (uhlelo luzokuxwayisa uma lubuthakathaka) bese ulinda inqubo yokusula ehamba kancane ukuthi iphele.
Ukubethela ku-Linux kubalulekile, ikakhulukazi uma usebenza ezindaweni ezabiwe noma ulayisha idatha efwini. Ngokudala ungqimba olwengeziwe lokuvikela , uvimbela ukwephulwa kwedatha kuseva yesitoreji ukuthi kungafaki ubumfihlo bakho engcupheni, njengoba ifayela elilayishiwe lizohlala libethelwe.
Izinto ezicatshangelwayo zomthetho kanye nezingozi
Ukubethela akuyona nje inketho yobuchwepheshe; ngezinye izikhathi kuyimfuneko. Izinkampani eziningi kanye nochwepheshe (njengabameli noma abaphathi bomphakathi) baphoqelekile yi- LOPD (Umthetho Wemvelo Wokuvikelwa Kwedatha) ukusebenzisa amazinga aphezulu okuphepha ukuvikela idatha ebucayi ehlobene nempilo, inkolo, noma imibono.
Kodwa-ke, kubalulekile ukuqaphela izinkinga. Ukubethela kusebenzisa izinsiza zesistimu, okungathinta ukusebenza kwehadiwe endala. Ngaphezu kwalokho, kunengozi yokonakala: uma ifayela elibethelwe lonakele ngisho nakancane, cishe akunakwenzeka ukulibuyisela, okwenza ama-backups angaphandle abe ukuphela kwenetha lokuphepha langempela.
Ukukhetha phakathi kwe-VeraCrypt, i-BitLocker, noma i-FileVault kuzoncika ekutheni ufuna ukulawula okungakanani phezu kwama-algorithms nokuthi udinga idiski yakho ukuthi ifundeke yini ezinhlelweni zokusebenza ezahlukene. Ngenkathi i-BitLocker iyindlela esheshayo yabasebenzisi be-Windows, i-VeraCrypt isalokhu iyindinganiso yokuphepha komthombo ovulekile kanye nokuguquguquka kwepulatifomu ehlukahlukene.
Umbhali oshisekayo ngomhlaba wamabhayithi nobuchwepheshe ngokujwayelekile. Ngiyathanda ukwabelana ngolwazi lwami ngokubhala, futhi yilokho engizokwenza kule bhulogi, ngikubonise zonke izinto ezithakazelisayo kakhulu ngamagajethi, isofthiwe, ihadiwe, izitayela zobuchwepheshe, nokuningi. Inhloso yami ukukusiza ukuthi uzulazule emhlabeni wedijithali ngendlela elula nejabulisayo.