PDA

View Full Version : Files encryption


high_revs
12-09-2009, 7:46 PM
With so much data out there and many ways to back it up (usb flash drive, small external hdd, etc.), is there a cheap/free way of encrypting it? For example, my company is now using file encryption on our machines since laptops are stolen left and right, and some employees are dumb enough to keep company confidential data on their laptops (even w/o having a need for a client visit, for example).

I'm looking for a way for own files I back up/carry on flash drives or external data. Any free/cheapies out there? At least tested/recommended?

armygunsmith
12-09-2009, 8:09 PM
TruecrypT is the best way. Portable and easy to use.

JDay
12-09-2009, 8:11 PM
TrueCrypt.

http://www.truecrypt.org/

You can also buy encrypted external drives and flashdrives.

http://www.newegg.com/Product/Product.aspx?Item=N82E16822161076&cm_re=aegis-_-22-161-076-_-Product

https://www.ironkey.com/

Uses 256-bit AES, same stuff used for data classified Top Secret.

JDay
12-09-2009, 8:12 PM
TruecrypT is the best way. Portable and easy to use.

Those Aegis Padlock drives and the IronKey are both easy to use and portable. No special software required either since its all hardware.

high_revs
12-09-2009, 8:27 PM
thanks. I'll probably software based for now since I already have the h/w (flash drives, external HDD drives, etc). I take it it's similar to encryption on my laptop, requiring a pin # to decrypt? And it asks you only when you connect the device?

On the next refresh if h/w, I'll look for build in encryption.

JaMail
12-09-2009, 8:30 PM
truecrypt


depending on how technical you are, it can be a little confusing to setup, but once you get it working right, its great.

JDay
12-09-2009, 8:41 PM
thanks. I'll probably software based for now since I already have the h/w (flash drives, external HDD drives, etc). I take it it's similar to encryption on my laptop, requiring a pin # to decrypt? And it asks you only when you connect the device?

On the next refresh if h/w, I'll look for build in encryption.

The one on your laptop is probably bitlocker, you can actually enable bitlocker on your external drives if you wish.

Bitlocker Tutorial (http://www.microsoft.com/downloads/details.aspx?familyid=6E419E75-BBEC-44BF-BF94-48EC4E1265AC&displaylang=en)

Link says Windows 7 bitlocker but its the same in Vista.

bohoki
12-09-2009, 8:45 PM
password protected zip files are pretty good if a good password is used (fairly long contains a number and capitol and lower case)

JDay
12-09-2009, 8:57 PM
password protected zip files are pretty good if a good password is used (fairly long contains a number and capitol and lower case)

You have no idea how easy it is to crack a zip password do you?

high_revs
12-09-2009, 9:07 PM
The one on your laptop is probably bitlocker, you can actually enable bitlocker on your external drives if you wish.

Bitlocker Tutorial (http://www.microsoft.com/downloads/details.aspx?familyid=6E419E75-BBEC-44BF-BF94-48EC4E1265AC&displaylang=en)

Link says Windows 7 bitlocker but its the same in Vista.

Actually, the install process/icon shows McAfee. How is that? It's forced upon us since we use a common application environment platform (all apps installed from central place, no .exe files to download and install on your own).

bohoki
12-09-2009, 9:18 PM
You have no idea how easy it is to crack a zip password do you?

do tell?

JDay
12-09-2009, 9:31 PM
Actually, the install process/icon shows McAfee. How is that? It's forced upon us since we use a common application environment platform (all apps installed from central place, no .exe files to download and install on your own).

Bitlocker is part of windows so there is nothing to install if you're using it. Just plug in the external drive/thumb drive, run bitlocker and enable it on the device you want encrypted.

JDay
12-09-2009, 9:33 PM
do tell?

http://zip-password-cracker.com/

http://www.zipcure.com/

http://www.rixler.com/zip_password_recovery.htm

http://www.apasscracker.com/products/zip.php

There's many more out there and these don't need a dictionary to run.

armygunsmith
12-09-2009, 9:33 PM
Truecrypt now allows for entire disk encryption, including your OS drive, which is a good idea for laptops.

bohoki
12-09-2009, 9:48 PM
if its so easy how about you crack this one and tell me what they are pictures of

http://www.yourfilelink.com/get.php?fid=520501

JDay
12-09-2009, 10:04 PM
Truecrypt now allows for entire disk encryption, including your OS drive, which is a good idea for laptops.

Bitlocker does the same thing, just make sure you get a laptop with a TPM chip so you can get the full use out of it, Truecrypt can use a TPM too.

freonr22
12-09-2009, 10:08 PM
if its so easy how about you crack this one and tell me what they are pictures of

http://www.yourfilelink.com/get.php?fid=520501

ohhh I love te see a challenge thrown down

JDay
12-09-2009, 10:15 PM
if its so easy how about you crack this one and tell me what they are pictures of

http://www.yourfilelink.com/get.php?fid=520501

It would help if that file wasn't corrupted.

bohoki
12-09-2009, 10:19 PM
i just downloaded it put my password in and saw my pictures the file should be around 2 mb

although it was made with the newest winzip14

QuarterBoreGunner
12-10-2009, 8:15 AM
Ironkey is awesome; I use the integrated FireFox browser through TOR for my... *cough* sensitive browsing... at work...

freonr22
12-10-2009, 8:40 AM
I did the air conditioning for ironkey in Los Altos about 2 years ago. They do neat stuff

QuarterBoreGunner
12-10-2009, 9:01 AM
Small universe; my BIL works for them.

ProTip: while Ironkey is tough as nails and will keep your data secure, it cannot withstand 7mm Remington Magnum rounds. We, uh, did a little unofficial 'test to destruction'.

GrizzlyGuy
12-10-2009, 9:33 AM
One more recommendation for TrueCrypt (http://www.truecrypt.org/). It's free, open source, works on all OS's, and you can easily carry the installer for each OS on your thumb drive along with the data so you can potentially access your stuff from any computer.

You can also create an innocent looking file that serves as an encrypted container for your other files (it maps to a drive letter when accessing) instead of encrypting the whole drive. That's a good feature, see their discussion of Plausible Deniability in their docs (http://www.truecrypt.org/docs/) (3rd topic from the top).

xrMike
12-10-2009, 10:13 AM
Actually, the install process/icon shows McAfee. How is that? It's forced upon us since we use a common application environment platform (all apps installed from central place, no .exe files to download and install on your own).Hmmm, sounds eerily similar to the Bay Area company I work for.

I really hate this encryption crap they foisted on us recently (in addition to the existing daily checks for software updates, the weekly system virus scans, and other "stuff" my laptop does that is totally out of my control. But what's a good worker drone to do?

You will be assimilated.

JDay
12-10-2009, 3:42 PM
Hmmm, sounds eerily similar to the Bay Area company I work for.

I really hate this encryption crap they foisted on us recently (in addition to the existing daily checks for software updates, the weekly system virus scans, and other "stuff" my laptop does that is totally out of my control. But what's a good worker drone to do?

You will be assimilated.

The nice thing about using Bitlocker in the enterprise is that its completely transparent to the user. Encrypts the entire drive. Only prompt you should ever get is for a PIN at boot if its been configured correctly. Sounds like your company might be using something else.

high_revs
12-10-2009, 4:26 PM
Hmmm, sounds eerily similar to the Bay Area company I work for.



If you understand when I say it's FPR and VPB time, then yes, we both work for the same company. :eek:

xrMike
12-11-2009, 12:52 PM
The nice thing about using Bitlocker in the enterprise is that its completely transparent to the user. Encrypts the entire drive. Only prompt you should ever get is for a PIN at boot if its been configured correctly. Sounds like your company might be using something else.We're using the McAfee product, whatever it's called?, same as high_rev I think. It also works in the background. All you ever see (with regards to encryption) is a PIN prompt about 5 seconds after you turn the machine on, and after that everything proceeds normally (the usual Windows boot).

I believe it also encrypts the entire drive. It has to be running in the background though, consuming resources and slowing me down though, right? Just like all of the other crap they force onto our machines...

If you understand when I say it's FPR and VPB time, then yes, we both work for the same company. :eek:Heheh, yeah, I think we slave for the same master alright... :D I'm a "contingent" though. "Cupe" campus. I see much rancor among the troops here, but everybody knows it beats the alternative. Seems like everybody's waiting for the economy to turn and then, mass exodus.

GP3
12-11-2009, 12:56 PM
www.truecrypt.org

1JimMarch
12-11-2009, 2:12 PM
Use Ubuntu's alternate installer and choose "whole disk encryption" based on DM-Crypt.

I've got *everything* locked.

As to ZIP files: use a long enough key (16char+) that's NOT in the dictionary and it's pretty solid.