File encryption

[Broadback]

Up to now I have used a free program (Encrypt files) finding it straightforward and easy to use. Sadly it does not seem to work with Windows 7. I have had a Google, all the other free programs out there seem very complicated and convolute. Any suggestions and ideas please? TIA

[Rik]

How do you use your encrypted files, BB, ie do you decrypt and re-encrypt or do you just encrypt 'dead' files?

[drummer]

Cryptainer LE is listed as Win7 compatible.

http://www.cypherix.com/cryptainerle

[Broadback]

How do you use your encrypted files, BB, ie do you decrypt and re-encrypt or do you just encrypt 'dead' files?

Not sue what you mean by Dead files, I simply encrypt the file, then when I need to use it decrypt it, recrypting again when finished.

[pctech]

He means files you don't use regularly BB.

[Rik]

I do indeed. I'm just wondering whether TrueCrypt might meet your needs, BB.

[Steve]

I agree Rik, TrueCrpyt looks useful

[Broadback]

I only use it for one file, that contains all my passwords, I know the theory that you should not write them down, but that is not practicable for my little brain. These days I have to look at my passport at time to remember my name! Now where did I put my passport?

[Broadback]

I find Truecript unnecessarily complex.

[Rik]

That's why I was asking what you were looking to do, exactly. You could try Top Secret.

[Steve]

Or zip it with a password,but then you'll need to remember the password.

[Technical Ben]

Simple solution. Print off the list, and put it in a locked money box or till box. Keep the key on yourself at all times. Or you can use one of the Firefox add-ons that automatically gives you high security passwords, and encrypts the saved files for you...  There are a few, but I don't use any so don;t know what to recommend.

[john]

I use 'gvim ' to edit text files which is similar to the UNIX 'vi' editor. You can encypt files simply by using the :X command and it will prompt you to enter and confirm a key. Once the file has been saved then opening it again you will be prompted for the key. If you enter an incorrrect key then the file is unreadable.

i.e. if the contents of the file are 'abcd efg hij klm nop qrst uvw xyz' then entering a wrong key produces something like '"~Ñä™Lkº0O¬‰?"(¤¸WGUäêɲ%XÏs½´!—Ö'.


Unfortunately it does mean you have to know how to use at least the basics of the gvim editor though.

[JB]

I find Truecript unnecessarily complex.

Sorry to hear that. I run Truecrypt (standalone) from a USB stick. I find it great.

If you are just saving one file, why not just ZIP it up and password protect the ZIP file? I do that with my main password file that I take between UK and Spain. Only proviso is to beware of the temporary file that some ZIP programs generate when you are viewing your original file.

[Rik]

What's the weather like over there atm, JB?

[JB]

I don't think you would like it Rik. Sitting out on the balcony with the NC10 and it's still 26C at 2138 local.

Cut the hedge today. All round the property, took all day.

Just relaxing with a post dinner drink. Maybe rain at the end of the week - but warm.

[Rik]

We have the rain and the cool. TBH, that suits me, but I'll bet there's a few here envying you, JB. (Plus others wondering what I'm talking about. )

[esh]

How hard an encryption are you looking for? If you want something crude and simple then an xor key can be done very very quickly without much effort. Otherwise TrueCrypt is what you want -- if you are actually serious about encryption. I tend to use this on any private/science data when I cross country borders (which is fairly often). If you perform a two level encryption method and then some classic obfuscation it will take a lot of effort to find, let alone crack.

[MisterW]

I only use it for one file, that contains all my passwords,

have you looked at Keepass http://keepass.info/ .  The encrypted file is compatible between versions running on Windows, Linux, OSx and even SmartPhones. You can even have a portable version on a USB stick, Windows only.

[nowster]

One thing to note is that the encryption on ZIP files was cracked years ago.

Don't forget GnuPG (a PGP clone). You can use it in "symmetric" (ie. single password, not public key) mode.

[JB]

One thing to note is that the encryption on ZIP files was cracked years ago.

Be grateful if you can point me to a URL that covers this without using a 'bruteforce' or 'wordlist' approach.

[nowster]

Be grateful if you can point me to a URL that covers this without using a 'bruteforce' or 'wordlist' approach.

A brute force attack on the original ZIP encryption algorithm is doable on modern processors in at most an hour. (It took about a day on 33MHz CPUs.)

Having looked into it more deeply, later versions of some ZIP programs can use more secure encryption algorithms (eg. AES). Even so, this might not be their default behaviour.

[Ray]

I use Stuffit deluxe to produce encrypted archives, that currently uses 512-bit RC4 encryption, don't know how secure that is though.

[esh]

RC4 is a stream cypher (as opposed to a block level cypher) so I believe it has been analysed for weaknesses. 512 bit obviously helps a lot against random bruteforce attacks. I would think AES would top it in every respect, as would RC5, but then I imagine it is vastly better than 3DES, though that isn't really hard.

Good enough if you're avoiding random prodding at least

[Broadback]

have you looked at Keepass http://keepass.info/ .  The encrypted file is compatible between versions running on Windows, Linux, OSx and even SmartPhones. You can even have a portable version on a USB stick, Windows only.

Thanks for that, I am now using Keepass, not as comfortable with it, but it does what I want, am sure that with usage it will become excellent.

[Simon]

Is is 'Kee Pass', or 'Keep Ass'? 

[Rik]

It depends.

[Simon]

 

[MisterW]

I am now using Keepass, not as comfortable with it

In what way are you not comfortable with it ?. I've used it for a while now, I keep my main file on a USB key with the portable version of the exe, and a backup on my Linux desktop. Means I can access userid/passwords etc from my Linux desktop/netbook at home. I can also access them from the office Windows ( yuk! ) machine from the USB key without having to install any software.

[Broadback]

Sorry, not a good choice of words. What I meant is that I am not yet familiar with it. I have saved and encrypted my banking detail, now I need to check, as and when I need tham, that it works as I think.

[Rik]

And that you've remembered the password.

[MisterW]

At least its only one password ( or passphrase ) to remember as we hurtle towards senility.
Some of us can even remember which forum we're in, Rik

[Broadback]

At least its only one password ( or passphrase ) to remember as we hurtle towards senility.
Some of us can even remember which forum we're in, Rik

We have never met, but you know me so well!

[Rik]

At least its only one password ( or passphrase ) to remember as we hurtle towards senility.
Some of us can even remember which forum we're in, Rik

I can't help it, I confuse easily.