Backup fails when encrypted file copied from NTFS to FAT
Posted: 01 Nov 2007 13:33
Backup fails when encrypted file from NTFS is copied to FAT file system.
Forum for XYplorer Users and Developers
https://www.xyplorer.com/xyfc/
What happens? Error message?Tamil wrote:Backup fails when encrypted file from NTFS is copied to FAT file system.
admin wrote:What happens? Error message?
---------------------------
XYplorer
---------------------------
Backup from 1/11/2007 8:28:35 PM
Source: Y:\
Target: Z:\
324 copied
0 overwritten
0 not overwritten
0 failed (source too long)
0 failed (target too long)
1291 failed (for other reasons)
1615 total
---------------------------
OK
---------------------------
That's my understanding, although I've always used a FAT system...so any encryption on FAT is via a user installed product, AFAIK.admin wrote: I guess NTFS encryption is not compatible with FAT.
I think that typically what happens is that the file ends up on the FAT volume in a non-encrypted state. At least that's what's documented:admin wrote: Now what should happen? I guess NTFS encryption is not compatible with FAT.
To copy a file or folder on the same computer from an NTFS partition in a Windows 2000 volume to a FAT partition. Copy the file or folder in the same manner as an unencrypted file. Use Windows Explorer or the command prompt. Because the destination file system does not support encryption, the copy is not encrypted.
I see it but I can't believe it. You plug a FAT device into a computer and decrypt data by copying them to your device? Stealing has never been simpler... well, I probably did not get it right.mwb1100 wrote:I think that typically what happens is that the file ends up on the FAT volume in a non-encrypted state. At least that's what's documented:admin wrote: Now what should happen? I guess NTFS encryption is not compatible with FAT.
http://www.microsoft.com/technet/securi ... 1.mspx#EEG
To copy a file or folder on the same computer from an NTFS partition in a Windows 2000 volume to a FAT partition. Copy the file or folder in the same manner as an unencrypted file. Use Windows Explorer or the command prompt. Because the destination file system does not support encryption, the copy is not encrypted.
Not exactly stealing, since it will only get decrypted if the user has access to the correct keys for decryption. However, it is certainly an avenue for unwittingly leaving a file decrypted.admin wrote:You plug a FAT device into a computer and decrypt data by copying them to your device? Stealing has never been simpler...
You mean you are asked for a key before copying? (Yep, I'm totally clueless in this area.)mwb1100 wrote:Not exactly stealing, since it will only get decrypted if the user has access to the correct keys for decryption.admin wrote:You plug a FAT device into a computer and decrypt data by copying them to your device? Stealing has never been simpler...
Code: Select all
The file 'test.txt' cannot be copied or moved without losing its encryption.
You can choose to ignore this error and continue, or cancel.
| Ignore | Ignore All | Cancel |
No, EFS (Encrypted File System) is an NTFS feature that works pretty seamlessly. To encrypt a file or folder you simply check an attribute box (you need to press the advanced button on the property sheet). The key is automatically generated and stored by Windows in something called the Protected Storage Service so it's accessible only to that particular user.admin wrote:You mean you are asked for a key before copying? (Yep, I'm totally clueless in this area.)
Thanks!mwb1100 wrote:EFS (Encrypted File System) ...
Okay, XY's Backup function -- contrary to the Copy function -- does not use the Shell but a lower level API named CopyFile to do the job. MS documentation says:admin wrote:Thanks!mwb1100 wrote:EFS (Encrypted File System) ...
So you encountered the ERROR_ENCRYPTION_FAILED error, which however is currently not correctly reported by XY's backup log. I'll change that.XP, Vista: When CopyFile is used to copy an encrypted file, it attempts to encrypt the destination file with the keys used in the encryption of the source file. If this cannot be done, this function attempts to encrypt the destination file with default keys, as in Windows 2000. If neither of these methods can be done, CopyFile fails with an ERROR_ENCRYPTION_FAILED error code.
Windows 2000: When CopyFile is used to copy an encrypted file, the function attempts to encrypt the destination file with the default keys. No attempt is made to encrypt the destination file with the keys used in the encryption of the source file. If it cannot be encrypted, CopyFile completes the copy operation without encrypting the destination file.
Fixed. Thanks!Tamil wrote:Backup fails when encrypted file from NTFS is copied to FAT file system.
That means? If you cannot store it encrypted (i.e. on FAT) you store it decrypted? And if so: do you give info to the user?admin wrote:Fixed. Thanks!Tamil wrote:Backup fails when encrypted file from NTFS is copied to FAT file system.