Is it possible to encrypt all files in a folder including their file names but totally without compression using 7zip?

Question

I have a folder with several files:

file1
file2
file3

I want to encrypt them all with AES including the file names so the output should be something like this:

kjk437fjk437
3k4jn34jk
j34nkj34

But I do not want to apply any compression at all.

Is it possible to do this with 7zip? I am using Debian and looking for Terminal based solutions only.

Edit: I also want to be able to get the filename back after decryption.

score 2 · Answer 1 · answered Jan 21 '19 at 07:55

You probably just want to hide the filename instead of to encrypt it, so something like the following should do:

for file in ./*;do 
  7z a $RANDOM-$RANDOM.7z -m1=copy -mhe -psecret "$file"; 
  rm "$file" 
done

-m1=copy means use copy method, so no compression.
-mhe means encrypt header, so without password one cannot view filenames inside the 7z file.
-psecret sets password to secret

score 0 · Answer 2 · answered Jan 21 '19 at 06:55

Is 7zip a must? Choose the right tool. EncFS seems to be it.

Install it. In Debian: apt-get install encfs.
Create two directories: mkdir encrypted mountpoint.
Run the tool:
```
encfs "$PWD/encrypted" "$PWD/mountpoint"
```
Note you need $PWD/ instead of ./ because encfs doesn't accept relative paths (unless -f is used).
Proceed as instructed to choose encryption, password.
Copy or move all directories and files you want to encrypt to ./mountpoint. Encrypted directories and files will appear in the ./encrypted directory.
Unmount:
```
fusermount -u ./mountpoint
```

You can now copy/move/rename/tar/whatever the ./encrypted directory as a whole. Note there is a hidden .xml file inside. The file includes the (password protected) key which is crucial, so don't lose it. It's possible to store the file separetely (read about ENCFS6_CONFIG variable in man 1 encfs).

To access the original files, repeat step 3, provide the right password. Work with files under the chosen mountpoint: read, add, remove, modify, anything goes. Finally unmount with fusermount -u like in step 6.

Notes:

encfs is FUSE (filesystem in userspace). See Why FUSE might be considered insecure on server?
There are also EncFS-specific security concerns.

score 0 · Answer 3 · answered Jan 24 '21 at 14:33

You could encrypt your folder twice to hide your file names:

type="zip"; file="your-folder"; password="your-password"; # You also could use other formats.
7z a -t"$type" "$file.$type" -p"$password" "$file"
7z a -t"$type" "$file.$type.$type" -p"$password" "$file.$type"

Then the file "your-folder.zip.zip" is what you want.

Is it possible to encrypt all files in a folder including their file names but totally without compression using 7zip?

3 Answers3