There is one caveat, though: who wants to put his potentially confidential data in the hands of an anonymous company? Dropbox uses encryption for both transmission and storage of data (on the Amazon S3 Servers), but the keys are in the hand of Dropbox.
The remedy: personal encryption. In this post, I will compare two approaches:
- TrueCrypt (www.truecrypt.org) and
- EncFS (www.arg0.net/encfs).
TrueCrypt
Truecrypt is a free open source encryption program that creates file containers which capture a whole directory tree. Once they are mounted they appear to the operating system just as a normal hard disk drive. No information about file sizes, filenames, directory structure etc. is available. It is not possible to see from outside how much data actually resides in the container. Also, true plausible deniability is possible by creating a so-called hidden volume which is mounted depending on which password is entered.
To put it in a nutshell: TrueCrypt is one of the most secure encryption programs available.
The good news: TrueCrypt works with Dropbox. Just put the container to your dropbox and mount it whenever you want to access it. Since only the file changes that actually take place are updated, it is no problem to put even larger volumes to the dropbox - only the file differences will be uploaded.
The bad news - there are some issues to take into account:
- For very huge containers, there is an annoying offset time before the actual synchronization can take place. My largest container was of the size of almost 10GB, and even with only minor changes to the volume (like creating an empty folder) it took up to 5 Minutes for syncing. This may be due to the fact that Dropbox needs to figure out where changes have actually happened, so some checksums have to be transmitted and compared.
- TrueCrypt puts an exclusive lock on the container, which means that Dropbox can only sync it once the container is dismounted. Now, imagine you forget to dismount your container on computer A, turn it off, and continue working with computer B. Since changes on A were not uploaded to the dropbox cloud, this will result in a conflict.
Principally, Dropbox handles conflicts quite well: it creates a copy of the conflicted file in the dropbox and leaves it up to the user to decide which file to take or how to merge the data. However, for huge TrueCrypt containers this feature is a killer: you have to download the whole container to your harddisk before you can resolve the conflict. This can take days for a 10GB volume...
EncFS
EncFS is also a free open source encryption program. In contrast to TrueCrypt, it encrypts each file individually, so there is no need of a huge container file. Encryption works on-the-fly just as with TrueCrypt. Filenames and directory names are also encrypted.
Not being an encryption expert, I would not consider EncFS to be as secure as TrueCrypt. This observation is simply due to the fact that EncFS does provide some information to the "outside": the complete directory structure and the file sizes. For example, this makes it easy to find out if some known software packages are stored.
Besides that, it works much better with Dropbox than TrueCrypt does. Since there is no big container file, no big time offset for small changes occurs. Additionally, the risk of conflicts is reduced dramatically since files are small and can be uploaded quickly before they are edited on another computer. No exclusive lock is put to the files while mounted. Still, there is a risk of conflicts which is equal to the risk of conflicts for normal/unencrypted use of Dropbox.
Of course... there is one big caveat also in this approach: EncFS is Linux only. For those who want to use it within windows in spite of that, there is a more or less comfortable workaround:
- install a virtual machine like VirtualBox (which is freely available)
- setup linux + encfs + a samba server on this virtual machine (I used Ubuntu 8.10)
- mount the encfs directory publicly - in Ubuntu this might look similar to
sudo encfs --public ~/Dropbox/encfs ~/encfs
Resolving Conflicts with EncFS
Once this works, one further problem has to be considered: even though with this approach conflicts are not more likely to occur than without encryption, they still can occur - for example, if two persons work on the same file at the same time. Or, if a huge file is changed and before the upload is finished it is changed on another computer.
Once a conflict occurs, it is more difficult to be resolved than without encryption. Dropbox will create a renamed file and leave the conflict resolution up to you. The problem is that you won't see this renamed file in the decrypted folder, but only in the encrypted one. So, you have to look into the encrypted folder to find the two files which could be named like "X7cBkyW" and "X7cBkyW.conflicted" (just an example). Then, if you want to see the contents of the conflicted file you have to rename it to the original name (and beforehand rename the original to something else). Then, you can open the unencrypted file. It can also be a bit difficult to actually find which one is the corresponding unencrypted file... filesize or directory structure can be helpful in this step.
Conclusions
EncFS wins over TrueCrypt with respect to usability. You can benefit from Dropbox just as if you would not use file encryption at all.
It is possible to resolve conflicts, however far not as convenient as it would be without encryption. Usually this should not be a problem because Dropbox is designed to avoid conflicts by instantly syncing files to the cloud. Conflicts are most likely to occur once files are shared with other persons, so in this case one should consider not using encryption at all.
