{"id":24548,"date":"2019-07-16T00:00:00","date_gmt":"2019-07-16T00:00:00","guid":{"rendered":"https:\/\/www.mailgun.com\/blog\/lemmacmd-herramienta-sencilla-cifrado-archivos\/"},"modified":"2026-09-16T19:09:24","modified_gmt":"2026-09-16T19:09:24","slug":"lemmacmd-herramienta-sencilla-cifrado-archivos","status":"publish","type":"blog","link":"https:\/\/www.mailgun.com\/es\/blog\/it-and-engineering\/lemmacmd-herramienta-sencilla-cifrado-archivos\/","title":{"rendered":"Lemmacmd: herramienta sencilla de cifrado de archivos"},"content":{"rendered":"\n

Occasionally we all find the need to encrypt files as part of our job. The need to encrypt files comes up for a variety of reasons: the need to commit sensitive information into a repository, the need to transfer information over an insecure medium, or the need to leave something on disk that requires stronger access controls than the operating system provides.<\/p>\n\n

While a variety of options exist, most of them are clunky, confusing, or worse yet, give a false sense of security. For example GPG is often recommended to encrypt files, but it ships with a variety of outdated ciphers and usability has never been it\u2019s strong suit. OpenSSL comes with a convenient command line tool called \u201copenssl enc\u201d, but it actually doesn\u2019t support any form of authenticated encryption.<\/p>\n\n

Mailgun has written a simple tool called\u00a0lemmacmd<\/b>\u00a0that uses NaCl and PBKDF#2 under the hood to encrypt and decrypt small files on disk. It gets a lot of things right:<\/p>\n\n