unwanted feature in v7.50: copy preserves EFS-encryption

English support forum

Moderators: Hacker, petermad, Stefan2, white

breqq
Junior Member
Junior Member
Posts: 2
Joined: 2009-09-15, 09:06 UTC

unwanted feature in v7.50: copy preserves EFS-encryption

Post by *breqq »

When an EFS-encrypted source file is copied, the destination file gets EFS-encrypted, too. In other words: copy seems to preserve encryption. This is a new feature in v7.50: in 7.04a, the destination file does not get encrypted.

No, this is _not_ a useful feature (imho): if you want to preserve encryption, enable encryption on the destination directory itself.

No, this problem is _not_ theoretic: yesterday
- I copied files from an encrypted directory to a pendrive
- after driving 100+ km, I plugged in the pendrive into another computer and I was very unlucky to be unable to access my files
User avatar
theosdikaios
Senior Member
Senior Member
Posts: 228
Joined: 2006-02-04, 13:02 UTC

Post by *theosdikaios »

It is discussed here already:
http://ghisler.ch/board/viewtopic.php?t=23805
"Since there are many things which have never happened and never will happen,
and which nevertheless are clearly conceivable, and imply no contradiction,
how can one say they are absolutely impossible?" Leibniz
User avatar
Hacker
Moderator
Moderator
Posts: 13144
Joined: 2003-02-06, 14:56 UTC
Location: Bratislava, Slovakia

Post by *Hacker »

For a new version I'd suggest a "Keep encryption" checkbox in the copy dialog.

Roman
Mal angenommen, du drückst Strg+F, wählst die FTP-Verbindung (mit gespeichertem Passwort), klickst aber nicht auf Verbinden, sondern fällst tot um.
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 50937
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Post by *ghisler(Author) »

No such option is needed, just turn off the new default copy method.
Author of Total Commander
https://www.ghisler.com
User avatar
Hacker
Moderator
Moderator
Posts: 13144
Joined: 2003-02-06, 14:56 UTC
Location: Bratislava, Slovakia

Post by *Hacker »

Christian,
No such option is needed, just turn off the new default copy method.
That is really not intuitive.

Roman
Mal angenommen, du drückst Strg+F, wählst die FTP-Verbindung (mit gespeichertem Passwort), klickst aber nicht auf Verbinden, sondern fällst tot um.
User avatar
MVV
Power Member
Power Member
Posts: 8713
Joined: 2008-08-03, 12:51 UTC
Location: Russian Federation

Post by *MVV »

Hacker wrote:Christian,
No such option is needed, just turn off the new default copy method.
That is really not intuitive.
Maybe we need special help topic for describing such indirect changes for each TC release?
So, for TC 7.50 one of them is that copy preserves NTFS encryption in default copy mode.
User avatar
Hacker
Moderator
Moderator
Posts: 13144
Joined: 2003-02-06, 14:56 UTC
Location: Bratislava, Slovakia

Post by *Hacker »

MVV wrote:Maybe we need special help topic for describing such indirect changes for each TC release?
So, for TC 7.50 one of them is that copy preserves NTFS encryption in default copy mode.
That is also not intuitive. :D

Roman
Mal angenommen, du drückst Strg+F, wählst die FTP-Verbindung (mit gespeichertem Passwort), klickst aber nicht auf Verbinden, sondern fällst tot um.
User avatar
MVV
Power Member
Power Member
Posts: 8713
Joined: 2008-08-03, 12:51 UTC
Location: Russian Federation

Post by *MVV »

Hacker wrote:
MVV wrote:Maybe we need special help topic for describing such indirect changes for each TC release?
So, for TC 7.50 one of them is that copy preserves NTFS encryption in default copy mode.
That is also not intuitive. :D
Oh, yes!!! :lol:

I may expand my suggestion: after finishing installation (each or when TC version changes) installer will open totalcmd.chm with this page to let user read more about such non-intuitive things. :roll:
User avatar
theosdikaios
Senior Member
Senior Member
Posts: 228
Joined: 2006-02-04, 13:02 UTC

Post by *theosdikaios »

In addition I want to extend the intuitiv behaviour with extra default option for "removable drives". In my cases encryption is wanted on local drives only but not on removable drives. Removable drives are often used for data exchange and/or for backups.
"Since there are many things which have never happened and never will happen,
and which nevertheless are clearly conceivable, and imply no contradiction,
how can one say they are absolutely impossible?" Leibniz
User avatar
theosdikaios
Senior Member
Senior Member
Posts: 228
Joined: 2006-02-04, 13:02 UTC

Post by *theosdikaios »

Up. :) I want to repeat the suggestion for handling EFS encrypted files.
Target is a removable drive -> "remove" encryption.
Target is a local drive -> keep encryption.

TIA.
"Since there are many things which have never happened and never will happen,
and which nevertheless are clearly conceivable, and imply no contradiction,
how can one say they are absolutely impossible?" Leibniz
User avatar
MVV
Power Member
Power Member
Posts: 8713
Joined: 2008-08-03, 12:51 UTC
Location: Russian Federation

Post by *MVV »

Support additional checkbox. ++
Sometimes I got similar situation - i.e. couldn't read files from USB stick just because of encryption that I forgot to remove.
Unfortunately I doubt that system file copy function allows to specify destination file attributes.
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 50937
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Post by *ghisler(Author) »

There is no parameter for CopyFileEx to remove the encryption, see:
http://msdn.microsoft.com/en-us/library/aa363852%28VS.85%29.aspx

There is just one which tells Windows that the operation will not fail when the destination doesn't support decryption.

So your only choice is to use the old copy method for removable drives. However, this method (ReadFile/WriteFile) is terribly slow with USB sticks...
Author of Total Commander
https://www.ghisler.com
User avatar
theosdikaios
Senior Member
Senior Member
Posts: 228
Joined: 2006-02-04, 13:02 UTC

WARNING Against Data Destruction

Post by *theosdikaios »

your only choice is to use the old copy method
:!: :!: :!: WARNING :!: :!: :!:
I forgot after a copy that this option should be reset to "standard copy method". Therefore it was the non-standard method active. That results in data destruction in the case of copy files with Windows 7 via WLAN at a Linux NAS. Unfortunately the copy action pretends a succesful copy action. An additional check only found this data destruction (there are lot of zero filled areas).
"Since there are many things which have never happened and never will happen,
and which nevertheless are clearly conceivable, and imply no contradiction,
how can one say they are absolutely impossible?" Leibniz
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 50937
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Post by *ghisler(Author) »

???
The old default copy method uses a simple ReadFile/WriteFile loop, just as if a program like notepad.exe would save data to disk. I don't see why this should cause data corruption. Maybe you used the big file copy mode?
Author of Total Commander
https://www.ghisler.com
User avatar
petermad
Power Member
Power Member
Posts: 16157
Joined: 2003-02-05, 20:24 UTC
Location: Denmark
Contact:

Post by *petermad »

2theosdikaios
In my cases encryption is wanted on local drives only but not on removable drives. Removable drives are often used for data exchange and/or for backups
Some might say the opposite - that encryption on removable drives are more important, because they are more likely to be lost or stolen - same thing with stationary PC versus labtop.
License #524 (1994)
Danish Total Commander Translator
TC 11.55rc4 32+64bit on Win XP 32bit & Win 7, 8.1 & 10 (22H2) 64bit, 'Everything' 1.5.0.1393a
TC 3.60b4 on Android 6, 13, 14
TC Extended Menus | TC Languagebar | TC Dark Help | PHSM-Calendar
Post Reply