Is it possible to encrypt your Java source code and still have it readable & writable in Eclipse?

Question

I have some Java source code on my laptop that would cause me a great deal of suffering if I were to lose possession of the laptop and the source code were to fall into someone else's hands.

Is there a way to encrypt the source code on my hard drive but still be able to edit it in Eclipse?

The other problem is I have been uploading the source code to my online version control repository - if someone were to figure out that password, they would have access to the unencrypted source. For that reason, by encrypting the source code locally before I upload new commits, I will stem the possibility of it being stolen either on my laptop or on the version control repository server.

What's the best way to achieve this type of security for source code without making it too difficult to continue editing that source code?

Answer 1

This isn't particularly related to code, to be honest - I'll vote to move it to Programmers, although SuperUser may be equally appropriate. All of your concerns would apply equally to non-source-code files with some CMS taking the place of source control.

• Use encryption within your local operating system (e.g. BitLocker) so that no-one can read the contents of your laptop disk without being logged in as you. Obviously make sure your laptop requires your password to be entered when it returns from sleep etc.

• Use an encrypted channel (e.g. HTTPS) between your laptop and your source control server. That will depend on your source control system.

• Make sure the server running your source control system is using appropriate OS-level encryption too

Answer 2

For that reason, by encrypting the source code locally before I upload new commits

You probably don't want that. Source control works by diffs, so encrypting it will result in the whole document changing every revision. Of course it will still work, you'll be able to revert to any revision, etc. and is better than no source control at all, but it defeats much of the purpose of it and will take much more storage space. If you are that concerned about security, do what I do, run your own source control servers, even keep them private behind a VPN.

I also use PGPDrive software, it's been around a while, http://en.wikipedia.org/wiki/PGPDisk, but the advantage is you can move it around, keep copies on removable media, and even use it across platforms. The disk is basically a big file that is mounted dynamically and is formatted with a filesystem. It requires a password or key, and is another level of security. Even if someone was to crack into your user account, or you left your PC unattended, the encrypted virtual disk is still unaccessible unless currently mounted.