Burning encrypted Blu-Ray data disc?

[Avenged110]

I have a spindle of 25GB BD-R discs onto which I want to burn encrypted disk images for archiving. Does anyone know a method to achieve this? Burning with Disk Utility works in the sense that I am able to burn data discs, but the contents can't be encrypted. Apparently, for CD/DVD, one can just drop the locked DMG onto the disc's Finder icon, but BDs obviously don't mount even though Disk Utility can recognize them.

Edit: found it.

 

[organicCPU]

What about something like this, if you'd like to burn a file named myEncrypted.dmg, located in your Desktop folder:

drutil -drive external burn -noverify -eject -speed 4 ~/Desktop/myEncrypted.dmg

If that doesn't work, maybe your media is not compatible with the BD drive or you might have more success with some third-party software like Toast.

 

[Avenged110]

If that doesn't work, maybe your media is not compatible with the BD drive or you might have more success with some third-party software like Toast.

It appears to do the same as the disk utility GUI, requesting the password to burn the contents sans encryption. I know OS X doesn't officially support BDs, but it just seems odd to me that it can burn to them just fine, but can't seem to burn an encrypted DMG. Do you happen to know if any variation of Toast is offered that supports OS X 10.9?

 

[chown33]

If it's only for archiving, could you live with a 2-step recovery process?

Basically, make a burn-folder, then put the encrypted dmg inside it. Burn the folder, so the encrypted dmg then resides in a file on the BD-R.

To recover, insert the BD-R, which should mount and show a dmg file therein. Double-click the dmg, and it should ask for the password to mount. Read files from dmg after it mounts.

 

[Avenged110]

If it's only for archiving, could you live with a 2-step recovery process?

I'm so dumb haha, I've never used OS X's burn functions so I've never noticed the "Burn X to Disc..." option in the Finder's File menu. That does exactly what I was looking for. Thank you both for the help.

Edit: to clarify, putting the DMG in a folder still requires one to burn the contents unencrypted. In order to simply "copy" the locked DMG to the disc, the above option in the Finder's File menu must be used.

 

[organicCPU]

If it's only for archiving, could you live with a 2-step recovery process?

Wow, that's really clever...
I realized the drutil manpage:

… If a file is specified (valid image files only: .dmg, .iso, .cue/bin, and .toc) the contents of the image file are burned. …

But is there really no option for drutil, hdiutil or dd to get the task done without a dmg inside a dmg?

 

[Fishrrman]

OP --

Unless the data you're "archiving" is something you don't want law enforcement to see, I'd suggest you NOT use encryption.

Seems to me the whole point of archiving important data is so that it can easily be found and accessed in the future.

What good will an encrypted BD disc be if -- 20 years or longer into the future -- you want to access the disc only to find you can't remember the password or the data won't de-crypt....?

One -wants- archived (and important) data to be EASY to "get to" in a moment of need...

 

[chown33]

But is there really no option for drutil, hdiutil or dd to get the task done without a dmg inside a dmg?

I'm not in a position to test this, but maybe try the hdiutil command with the burn verb
and the -encryption option.

I notice the command in post #2 is drutil, which is the disk-burning utility. I suspect it might need to mount the disk-image in order to burn it, and that mounting it may be effectively eliminating encryption from what drutil sees about the disk-image to burn.

Using hdiutil, on the other hand, is the disk-image utility, so its ability to manage encryption may well exceed drutil's. It does have a burn verb, so it appears to be able to burn disks.

Example on-line man page for hdiutil:
https://ss64.com/osx/hdiutil.html

 

[Avenged110]

OP --

Unless the data you're "archiving" is something you don't want law enforcement to see, I'd suggest you NOT use encryption.

Seems to me the whole point of archiving important data is so that it can easily be found and accessed in the future.

What good will an encrypted BD disc be if -- 20 years or longer into the future -- you want to access the disc only to find you can't remember the password or the data won't de-crypt....?

One -wants- archived (and important) data to be EASY to "get to" in a moment of need...

Understandable, I can appreciate your concern. Fwiw, I've taken steps to ensure that I won't forget the password. And while none of my data is of any use to law enforcement (mostly just my photo and music libraries and a bunch of old YouTube videos), I guess just out of unfounded paranoia I like to know that all of my data is accessible only to me, just for comfort I suppose.