Storage
I need to software to secure files that will be store on cd and send over to a client. Can someone recomend a encryption software? Money is not a issue.
Thank you
by ayje Accepted solution
by cmiller5400 Accepted solution
by dumphrey Accepted solution
by robo_dev Accepted solution
TrueCrypt is free
http://www.truecrypt.org
PGP Desktop
http://www.pgp.com/
One feature of PGP Desktop is PGP Zip ?
"For storing backups or sharing files, PGP Zip stores files and folders in a single, compressed file. If files need to be shared with others that do not have PGP Desktop, users can create a PGP Self-Decrypting Archive (SDA) that automatically executes and decrypts files after successful authentication."
by dumphrey Accepted solution
by michael kassner Accepted solution
Does PGP use a symmetric or asymmetric key encryption when it encrypts files?
That might be a consideration when determining which is more feasible.
by dumphrey Accepted solution
asymmetric keys. I prefer Truecrypt because PGP is no longer open source. But both are good products.
PGP and Truecrypt are both "uncracked" as far as I know. No idea for how much longer though.
by Former member Accepted solution
The last that I was aware of PGP it used RSA encryption. While RSA is secure when used with large prime numbers for r and q, it is trivial to crack with small primes.
Our current technology makes it unfeasible to find prime numbers that have 1024 digits in a reasonable time let alone 2048 or 4096 digits. What happens is that two numbers are picked with X digits and that are odd - all primes except 2 are odd - and it is hoped the the time it takes to decipher the resultant number is too expensive in time to make it worth the effort. The other issue with RSA is that computers are incapable of choosing a truly random number of any size, let alone one of those sizes. Therefore, if you have a large enough sample a mathematical pattern will develop. The NSA loves RSA, but not for security.
For short documents and to deter most people, PGP works well.
by dumphrey Accepted solution
culd not get past any publicly available encryption. Even truecrypt is limited to 256. All the AES programs I have seen are 356 bit limited... why? Hmmm
THEY ARE OUT TO GET US!!!!!!
Maybe the NSA has leaned on many people to maintain the 256 bit "standard"?
by michael kassner Accepted solution
That might make a difference to the OP then. If passphrase exchange is an issue then use PGP, if not I myself would recommend TrueCrypt.
I do not know how you all feel about Steve Gibson, but he has two podcasts about TrueCrypt and they are very informative.
by Former member Accepted solution
and listened to one of the podcasts. About a 1/3 was advertising.
What I took away was that TrueCrypt probably uses a form of virus encrytion that was/is called polymorphic encryption that was most often used in the 'Dark Avenger' variants. What leads me to this conclusion is the description of the random mouse movement and the boot sector. It has been many years since I studied up on virus's.
The problem with virus encryption is that it leaves a small section unencrypted that is used to en/decrypt the file. This tag would be the key to attacking the encryption.
Should I find the time, I will download the source and look a little closer.
by robo_dev Accepted solution
Put an encrypted folder
inside another encrypted folder
inside another encrypted folder
inside another encrypted folder
inside another encrypted folder
inside another encrypted folder
inside another encrypted folder
And even you won't be able to get to your data.
by Former member Accepted solution
Please post back if you have anymore problems or questions.
by ayje Accepted solution
by michael kassner Accepted solution
by Former member Accepted solution
The Dark Avenger variants read the time stamp from the bios and used this to 'readjust' the virus encryption during reboot so that the virus was constantly evolving in an attempt to thwart virus detectors. The key to finding this virus was that there was a stub code in the boot sector that always had the same signature. This stub was needed for two things, the first to detect if the virus had infected files, and second to re-encrypt the infected virus in the file.
What I heard, and believe me, because I am talking out the side of my neck based on a description that is not yet researched, is that a small stub of code is placed on the boot sector that in conjunction with the pass phrase is used to decrypt the drive. This means there is a two part authentication in place with one half of the authentication available. The fact that you do not have the second half of the authentication becomes irrelevant because you have the instructions for decryption in an unencrypted format. Next you have the source available that you can view that informs you of the exact method of creating the second half of the authentication. If you chose to, you could probably regenerate most of the key from this description. The randomness of the mouse can be overcome with heuristics (applied statistical analysis, since heuristics can mean many things per use) because you know the mouse has a finite number of positions that it can be at and that humans tend to work in patterns - swirl, diagonal, four corner, ext.
Now rule out the most secure encryption methods known such as the Blumberg-Shaw and the Torseeine because they are deterministic and take far to long on a conventional machine and you are left with more common encryptions such as RSA, MD5 (linux favorite), and AES.
You can place these inside a matrix and apply matrix algebra to crack the encryption.
Now bear in mind that this is not as easy as the description - to be frank it is a bastard, but it is doable if the data is that important.
The primary point is that if a person/entity is determined enough and has enough time all current encryption can be broken. The key is time. If it take 30 years to break the encryption, it is not worth the effort because the data will be out dated by then.
I am not an encryption expert, but I have had to do a little work with encryption and have an understanding of the history although some of my facts may be confused by now.
Hope this answers your concern.
by michael kassner Accepted solution
Fascinating stuff. I wish I had more time and did not always have to be reading about new networking technology. I have several security certs, but that really does not mean anything when you get to the detail you just described.
Thank you for taking the time to explain, I truly appreciate it.
This discussion is closed to new replies.
Sort by Trending