As for Windows EFS encryption, there are some significant drawbacks to using it. Not the least of which is if you are signed in to your computer, you open the door for access to anything, by anyone. (No passwords required). EFS also does awful things to files, such as changing all the files dates around, never to be recovered. So it’s never a good idea to encrypt entire folders. (Because it creates a new file for each, but it overwrote the old one), so any record of file modification has been completely lost, unless you take a lot of notes on each file in advance. In projects, programming, or presentations this can be disastrous, short of great advance precaution.

Last but not least, if there is a system crash, and you need to reinstall Windows, or system data becomes altered and you have to do some kind of major recovery, your chances of retrieving your encrypted files is close to nil. The fact that your UserID and password are the same as they were before, doesn’t matter. Programs like this don’t have that shortcoming. Access remains the same.

The description for this program is a bit confusing, but for individual file encryption, it seems as though it would do the job adequately. It simply turns any file of any kind into a self-extracting executable with a password for access. This would presumably apply to executables, imagery, videos, doc files, text, etc.

It’s not something I need right now, but might apply favorably in some cases.

-JC

@AndyPandy #18 & #38, open source is really the only way to go. The biggest threat to data encryption security (other than weak passwords), is whether or not the algorithm and protocol used has a weakness, which the open source community would be sure to find. There is nothing wrong with everyone knowing how you encrypt because they still need your private key (if using public/private keys) and your pass phrase or password to break the encryption.

PGP does have a rather large install but the reliability and credibility are unsurpassed. I’ve recommended the trial (turns into freeware), to many customers just for the encrypted self-extracting executable feature.

http://en.wikipedia.org/wiki/Pretty_Good_Privacy
http://www.pgp.com/downloads/desktoptrial/

Opensource = Alive a long time.

One last piece of guidance – compress, then encrypt. Lossless compression does its work by finding and transforming redundancy in the data (e.g., representing 25kbits of alternating ’1′s and ’0′s with ’10′ and an indicator of how many times to repeat); encryption processes by their nature make data look pseudo-random and, therefore, lacking in redundancy. Compression of an encrypted archive usually results in a file size increase(!), if the encryption is truly good and pseudo-random. Actually, a simple test of the pseudo-randomness of an encryption process is to see if the reulting data becomes uncompressible. ;-)

#38: Having worked in the security field for 24+ years, in this case an open-source algorithm is preferable. It may be counter-intuitive, but a well-vetted open source algorithm benefits from public scrutiny – there is a high likelihood that there can be no remaining back-doors that would enable data recovery without knowledge of the key, or allow recovery of the encryption key itself. The security of any encryption process is dependent wholly on the quality of the actual implementation – which benefits from peer review – and upon the strength and protection afforded the key used with the algorithm. I’m oversimplifing somewhat, but that’s pretty much it. If this weren’t true, then all web and banking security would be vulnerable (e.g., SSL, TLS, DES, and AES are all publicly available security protocols and algorithms). Security by obscurity (i.e., depending solely on the secrecy of an algorithm) is no security at all.

The thing is, quote “but to gain that trust they can’t exactly tell you exactly what the software does in the encryption” is the root of your misconception IMHO.

In Open Source software everybody knows what the encryption part is doing. Without the password it is still very hard to get back to the origin. The protection is in the encryption.
Not knowing what happens is just obscuring things, also obscuring the possibility of hidden features. There is always little protection from obscuring things. This would not be my horse of choise to make a bet.

The trust in Open Source software comes from the fact that there are no ‘hidden features’ compromising your trust.

It’s me who likes to thank you for your participation and sharing your views with us.

Of course the biggest CON of this GAOTD is that it’s not OPEN SOURCE, so it’s not the most secure option available on the “market” for this kind of applications but overall I give it THUMBS UP (am I the only one here?? LOL!!).

BEST FREEWARE ALTERNATIVES (all these programs are VISTA compatible):

- TrueCrypt (OPEN SOURCE so probably the best solution for encrypting files)

- AxCrypt

- Kruptos 2

- DPCRYPT 1.05 (cryption tool with very high security settingssuch as Blowfish, Cast256, 3DES, Mars, Twofish, RC6, Rijndael and Serpent)

- File Crypt 1.0.2

- CryptoSidekick Personal (2048-bit RSA keys, 256-bit strong AES symmetric encryption)

- iSafeguard Freeware 6.2 (secures your files and e-mails with strong encryption and digital signature)

- ZNsoft Crypto 2.5

-Flash Securer 1.1

http://www.download.com/Flash-Securer/3000-2092_4-10645676.html?tag=mncol

A program which allows you to secure the sensitive data you carry on your USB FLASH DRIVE: since the data is encrypted, your sensitive data won’t get into someone else’s hands even if the FLASH DRIVE is stolen or lost.

- MyWinLocker 3

http://www.download.com/MyWinLocker/3000-2092_4-10841300.html?tag=mncol

A cool, light, and easy to use encryption tool with slick interface to encrypt or decrypt files with advanced encryption technologies (AES multiple file encryption, secure disk, password assistant manager, desktop search security etc….) which are accessible through a (VISTA) sidebar gadget or just by right-clicking on a specific file or folder.

- Advanced File Security Basic 3.1.4

A good encryption application to protect any type of data against unauthorized access using the world-wide standardized, fast and very safe encryption algorithm – AES. Usable with all kind of storage types such as Hard-Drives, CD/DVD, USB Sticks.

- MEO File Encryption Software 1.10

http://www.download.com/MEO-File-Encryption-Software/3000-2092_4-10684789.html?tag=mncol

An excellent encryption application to encrypt or decrypt files of any type, including Microsoft Word, Excel and PDF documents as well as email, so as to protect your sensitive data against un-authorized viewers by utilizing the latest data encryption technologies

- STEGANOS SAFE ONE 10.0

http://www.download.com/Steganos-Safe-One/3000-2092_4-179318.html?tag=mncol

What happens if your kids turn off your firewall then leave you unprotected whilst your computer is left online? Your files and data stored in your HD would be accessible to hackers or any other unauthorised users.

To avoid this, this TOOL turns a section of your DRIVE into a protected and encrypted area, creating two Data Safes with 1 GB capacity each on your PC, Laptop, USB-Sticks, CDs, DVDs and so on, that is only accessible if you know the password required to access the encrypted DRIVE. In this way you can be sure that no one can get access on your personal data (photos, documents, music,video etc…) in case you forget your laptop somewhere or it’s stolen by thieves…LOL!!

This program uses the Advanced Encryption Algorithm AES with 256 Bits helping you create HIGHLY SECURE PASSWORDS which you even don’t need to remember since you can use a USB-Stick for a key or a sequence of pictures with Steganos PicPass.

- CryptDisk.4h 3.0.0.2

http://www.download.com/CryptDisk-4h/3000-2092_4-10761842.html?tag=mncol

An encryption utility based on a VIRTUAL DISK created by the program itself within a file: everything you write to the created virtual disk will be encrypted transparently and then decryption is automatic as CryptDisk.4h automatically decrypts the data before it is loaded, but when data is written back to the hard disk it is automatically re-encrypted using two of the most proven encryption algorithms: AES-256 and Twofish-256. Very easy to use as multiple drives can be easily managed from a simple list menu, not to mention that after mounting a drive files can be dropped in and removed using Windows Explorer or just the drag and drop function.

- TRax File Guard 0.1b

http://www.download.com/TRax-File-Guard/3000-2092_4-10668853.html?tag=mncol

An encryption utility acting as a safe-deposit box for your confidential documents and files for the windows operating system. It encrypts and password-protects any kind of files (e.g. text, document, application executable, and multimedia) using high secure 256 bit Advanced encryption standard with a single mouse click, enabling you to protect your files from being accessed by other people. TRax File Guard is compatible with all file systems including NTFS, FAT, and FAT32.

- WISeCrypt 1.4.6.18

http://www.download.com/WISeCrypt/3000-2092_4-10728953.html?tag=mncol

It helps you to securely protect, encrypt, decrypt and wipe files, folders, and email on any storage device using WISeKey CertifyID certificates (which are also free), thus making it safe to store sensitive data on fixed, or transportable media, and transfer them over public networks.

KEY FEATURES:

* integration with Windows shell
* high security using trusted X.509 digital certificates
* supports AES (Rijndael), 3DES, RSA, RC4 and other asymmetric and symmetric cryptographic algorithms.

- EASY FILE LOCKER

An easy-to-use security software product designed for protecting your private files and folders on your local PC simply by keeping them out of sight from any possible intruder’s eyes. With its great protection, users will not be able to open, read, modify, delete, move, copy the locked files/folders, or even not be able to see it as the hidden files/folders will be totally invisible to all users and to any program even under Windows Safe Mode.

And above all:

- DEVAULT 2009, an easy to use, secure and powerful TOOL, far more superior to any other utility, for organizing, securely storing and sharing files.

http://ekwintools.com/

Unlike any Zip product, deVault also has built-in Categories and Labels to help you organize all your files.

With this stunning TOOL you can securely store and organize all your important files using them anywhere on any PC as well as synchronize your files between any number of PCs, find any file using real time search and above all share multiple files with others in secure digital vaults.

KEY FEATURES:

- Built-in Compression
- Categories, Labels
- Revision Control and fully customizable interface
- Synchronization
- Backup and Restore
- Email, FTP, HTML Links
- Instant Search
- 256-bit Blowfish Encryption to keep all your files safe from intruders.

Did I mention that it’s FREE?? LOL!!

FULL REVIEW here:

http://www.pcworld.com/article/158583/devault_helps_protect_against_identity_theft.html

———————————————————————————————————————————————–

If you need to find out any password-protected or encrypted files from your PC or network so as to check out how secure your protected files are or verify that you still have passwords for your important files, these two FREE TOOLS can actually do this job effectively and efficiently :

- Passware Encryption Analyzer 1

http://www.softpedia.com/get/Security/Encrypting/Passware-Encryption-Analyzer.shtml

This is an excellent free encryption scanning tool that finds password-protected or encrypted files on a PC. With this professional tool you can also verify that you still have passwords for your important files and if you need to unprotect one or more of them, this application gives you the required password recovery module automatically. Full system scan usually takes less than an hour and can be run in the background.

KEY FEATURES:

* Scans files fast – over 4,000 files per minute on an average PC
* Runs the required password recovery modules to unprotect your encrypted files
* Supports over 100 different file formats
* Provides detailed information: file formats, protection methods
* User-friendly Explorer-like interface
* Available as SDK for .NET

- RememberMe 1.7

http://www.softpedia.com/get/Security/Password-Managers-Generators/RememberMe.shtml

A free password storage tool that uses an AES encryption method to ensure that you are the only person that has access to your passwords, allowing you to create customized categories to better organize and retrieve your passwords.

Finally if you need a small and handy application for creating unbreakable passwords in a few clicks, using 4 hash algorithms, “Aconiac Password Generator” is definetely one of the best solutions for this, as the password generator is very easy to install using very few resources indeed with the additional option to integrate in the user’s system a simple tool that can be opened when needed.

http://www.softpedia.com/get/Security/Password-Managers-Generators/Aconiac-Password-Generator.shtml

Another application to create numeric, alphabetic, alphanumeric or even special character passwords with variable length is also Tukanas Password Generator 1:

http://www.download.com/Tukanas-Password-Generator/3000-2092_4-10768061.html?tag=mncol

Hope this helps.

Cheers from Italy.

Giovanni