Been waiting for the encrypted filesystem support so that the Pro would meet requirements for corporate email since I got my Pro in Dec. Upgraded to 3.8.7 when it came out, and turned on device and SD encryption.
Oddities ...
(OK, the oddities came out a questions. But these are more rhetorical - not really needing an answer)
Why per-file encryption and not device encryption?
Why leave old files or those copied from PC unencrypted, and only encrypt new files created on the phone?
Given the mix of encrypted and unencrypted files, why no method for seeing their state or converting to/from encryption?
Why encrypt files but retain the original filename, so you can't tell by looking at a file in the filesystem whether it has been encrypted or not?
Seems like a pretty marginal half-a$%ed encryption implementation.
The real question ...
How do I access a decrypted copy of the files from the PC USB interface?
USB Mass Storage mode mounts the sd card with a drive letter, and lets me see the files, but in their encrypted form. It basically mounts the SD card as a 'dumb' usb drive. (If you view a '.txt' file, you see the encrypted binary)
USB PC Mode makes the droid look like a music player to the PC - you see a 'droid' device which has media syncing and such. I believe that this show the unencrypted view of the files, since it is being interpreted and exported through the OS (wow, that was a horrible explanation). BUT, PC Mode only appears to show certain media file types (mp3, jpeg, etc) and their associated directories, so most of the directories and files are totally inaccessible. (even renaming junk.xls to junk.jpeg and putting it in the 'downloads' directory does not seem to work).
Dropbox, or email, or some other indirect solution is not acceptable, since the whole idea of encryption is to keep my unencrypted files out of the porous cloud. Plus, it would be annoying and awkward.
So, sub-questions ...
Does the Droid use a standard encryption algorithm like AES/256, and can we get/find/see the encryption key on the phone, such that I could use USB Mass Storage mode and a PC-side decrypter with that key to see the file?
Alternatively, is there a way to make USB PC Mode show other files types and directories? Hypothesize it could be a rooted phone and I am totally comfortable poking around the linux underpinnings of the phone.
Oddities ...
(OK, the oddities came out a questions. But these are more rhetorical - not really needing an answer)
Why per-file encryption and not device encryption?
Why leave old files or those copied from PC unencrypted, and only encrypt new files created on the phone?
Given the mix of encrypted and unencrypted files, why no method for seeing their state or converting to/from encryption?
Why encrypt files but retain the original filename, so you can't tell by looking at a file in the filesystem whether it has been encrypted or not?
Seems like a pretty marginal half-a$%ed encryption implementation.
The real question ...
How do I access a decrypted copy of the files from the PC USB interface?
USB Mass Storage mode mounts the sd card with a drive letter, and lets me see the files, but in their encrypted form. It basically mounts the SD card as a 'dumb' usb drive. (If you view a '.txt' file, you see the encrypted binary)
USB PC Mode makes the droid look like a music player to the PC - you see a 'droid' device which has media syncing and such. I believe that this show the unencrypted view of the files, since it is being interpreted and exported through the OS (wow, that was a horrible explanation). BUT, PC Mode only appears to show certain media file types (mp3, jpeg, etc) and their associated directories, so most of the directories and files are totally inaccessible. (even renaming junk.xls to junk.jpeg and putting it in the 'downloads' directory does not seem to work).
Dropbox, or email, or some other indirect solution is not acceptable, since the whole idea of encryption is to keep my unencrypted files out of the porous cloud. Plus, it would be annoying and awkward.
So, sub-questions ...
Does the Droid use a standard encryption algorithm like AES/256, and can we get/find/see the encryption key on the phone, such that I could use USB Mass Storage mode and a PC-side decrypter with that key to see the file?
Alternatively, is there a way to make USB PC Mode show other files types and directories? Hypothesize it could be a rooted phone and I am totally comfortable poking around the linux underpinnings of the phone.