up vote 0 down vote favorite
share [g+] share [fb]

We want to encrypt a folder using GPG, but we want to prevent a disgruntled employee from changing the private key, encrypting the folder, and then leave the company. I know you can revoke a key pair, but that's only if you know before hand that the employee is leaving.

Or is there a way to encrypt a folder with a specific public/private key pair only.

Thanks.

link|improve this question
1  
I think to get an answer, you should provide more information like who owns the folder, who should have access to it, whom should the keys belong to, etc... – Felix Jan 5 '10 at 14:10
Only a certain group should have access to the files. We would encrypt the entire folder, and preferably have a way to decrypt the data if a user encrypts with a different key. – mike Jan 8 '10 at 23:13
1  
I think the only way around this is to keep daily/hourly backups of the encrypted folder. Ultimately, it's the same risk as having a rogue user delete the folder. – Iain Jan 9 '10 at 8:02
You are right. I'll recommend that and see how it goes. Thanks for your help! – mike Jan 9 '10 at 20:29
feedback

1 Answer

up vote 1 down vote

I can't find any information about how to encrypt folders with GPG.

Assuming you are not yet committed to GPG, Truecrypt is an excellent open-source folder and drive encryption program which deals with this problem.

The Truecrypt FAQ describes how to reset passwords if reset by non-administrators. See the question:

We use TrueCrypt in a corporate/enterprise environment. Is there a way for an administrator to reset a volume password or pre-boot authentication password when a user forgets it (or loses a keyfile)?

link|improve this answer
Truecrypt may work, but I thought there would be something more like having two private keys for the same encrypted data. – mike Jan 8 '10 at 23:17
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.