This might be considered as an information leak. The filename of the encrypted file is still visible. “AES Crypt is a file encryption software available on several operating systems that uses the industry standard Advanced Encryption Standard (AES) to easily and securely encrypt files.”ĪES Crypt is free and is multi platform but it only allows for single file encryption. Besides the solutions already provided in Microsoft Windows you also have a number of free and non-free solutions. There are a number of different solutions on the market that position themselves as the perfect replacement for TrueCrypt. The applications were installed on an up to date Windows 7 and 8, various crypto containers were created and small and large files were copied to and removed from the containers. The comparison focused on “ease of use for end-users”. I also did not verify if the application logic or implementation had vulnerabilities. The timeframe of the request was to short to do a profound check of the implemented cryptographic systems. Test method, crypto strength and reliability Java has a catastrophic security track record and should be avoided in corporate environments. However, using Java in a corporate environment (especially for a ‘security solution’) is a very bad idea. There are a number of java based encryption solutions that provide the requested features. The request was extended with not allowing Java based solutions. Ideally the solution has to have support for cloud storage but this feature-request is not considered as a show stopper though. This becomes problematic once you start using larger containers. So the slightest change to any file in the container causes a full sync of that container. With encryption however the sync utility can not differentiate between the different files, it can not look “inside” the container and considers the container as one solid file. This works fine for individual files inside a folder.Ī change in a file causes that single file to be synced to the cloud storage. Most of the cloud storage providers have some sort of utility that syncs a users’ folder with the cloud storage. With the popularity of free cloud storage providers users started to share these containers via the cloud. Typically users share encrypted containers by emailing them or copying them to removable media. The containers have to be easy shareable with multiple users, preferably via a cloud storage provider. Have a simple to use, reliable encryption system for individual containers on Windows platforms in a corporate environment Easy sharing After a couple of questions back-and-forth we defined the request to : TrueCrypt alternatives for Windows, Encrypted Container SystemsĪ colleague recently asked me “what encryption solution should I now use instead of TrueCrypt?”.
0 Comments
Leave a Reply. |