Re: Non-expert's encryption question

From: Michael Zawrotny (zawrotny@jaguar.sb.fsu.edu.sb.fsu.edu)
Date: 01/31/02 

From: zawrotny@jaguar.sb.fsu.edu.sb.fsu.edu (Michael Zawrotny)
Date: 31 Jan 2002 14:06:19 GMT

"Nico Kadel-Garcia" <nkadel@bellatlantic.net> writes:

>"Joseph Mildenberger" <Joe.Mildenberger@triumf.ca> wrote in message
>news:3C586FE5.F650DCD9@triumf.ca...
>> I ask this question as a largely ignorant user of scp/ssh, and of
>> encryption in general. I understand, or at least think I so, the need
>> for encrypting passwords and other private user-related info. But for
>> most of the work I do, I don't really care whether the _content_ of
>> stuff I ship across the internet is encrypted or not: there's no
>> personal/private/proprietary information involved.

>Use a webserver, and use HTTP to pull down the data. If you are concerned
>about the contents privacy, use PGP to encrypt it before transmission, and
>to decrypt it after the transmission with an SSH session.

Another possibility would be to use netpipes
(http://web.purplefrog.com/~thoth/netpipes/netpipes.html). Use ssh
to get to the remote machine and use tar/dd/whatever in conjunction
with faucet and hose to dump the data across the network. For example, to
transfer a data file from local to remote:

1. ssh to remote and execute "faucet 9999 --once --in dd of=data_file"
2. from local execute "hose remote 9999 --out dd if=data_file"
3. The port number chosen can be anything that you like as long as you
    have sufficient privelege to open it and it is passed by any relevant
    firewall.
4. For a small amount of additional security you can use the
    --foreignhost option to faucet.

As a single, not necessarily representative data point,
scp (OpenSSH 2.9, aes128) sent a 350MB data file across my local network
at about 4.3 MB/sec, whereas faucet/hose dumped it at about 8.6MB/sec.
This is with both workstations directly connected to the same switch.

Hope this helps,

Mike 

-- 
Michael Zawrotny
411 Molecular Biophysics Building
Florida State University                | email:  zawrotny@sb.fsu.edu
Tallahassee, FL 32306-4380              | phone:  (850) 644-0069

Relevant Pages

  • Re: Command-line speed test?
    ... to send a file to another server, and view the Kbps reading. ... this would be a true measurement, ... because it uses encryption, ... think one needs an account on the remote machine. ...
    (Ubuntu)
  • [opensuse] Howto start encrypted machine remotely
    ... There's a remote machine with encrypted /home and /swap. ... [using openSUSE 11.0 with Encryption setup during initial setup process] ... Ist Ihr Browser Vista-kompatibel? ...
    (SuSE)
  • File Transfer
    ... Encryption authentication can not be ... >On attempting to copy an encrypted file in a folder on my ...
    (microsoft.public.win2000.security)
  • Re: FTP client with file encryption for remote backup?
    ... that both the encryption keys and/or pass phrase are available to anyone ... assuming she's only a stereotypical grandmother. ... transmitted to the remote machine, ...
    (alt.computer.security)
  • Re: FTP client with file encryption for remote backup?
    ... that both the encryption keys and/or pass phrase are available to anyone ... assuming she's only a stereotypical grandmother. ... transmitted to the remote machine, ...
    (alt.computer.security)