Eng-Tips is the largest engineering community on the Internet

Intelligent Work Forums for Engineering Professionals

  • Congratulations waross on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Encryption - Password Sofware

Status
Not open for further replies.

lexington

Marine/Ocean
Jul 24, 2003
4
0
0
AU
Does anyone know of an Encryption - Password sofware package that provides HIGH security without significantly increasing the file size ?
Usage is to prevent 'third party' cracking when files are transmitted via a shared email-server. Adobe *.pdf and (obviously) Microsoft Office files are being accessed by the 'sever-spies'.
 
Replies continue below

Recommended for you

Regretably the worst offender is the owner/operator of the server !! Makes it difficult !!
PS Re-reading my post I see I have to learn to spell "sofTware".
 
Thanks IRstuff, I was aware of PGP although I've never used it upon the basis of increased file size, however, in reality I think it may be the only reasonable alternative. Thanks again for the input !
 
I also recommend PGP.

If you truly need HIGH security, then the file size consideration should be waived. Much of the strength of encryption comes at a cost of additional storage space. Without increasing the file size at all (or using compression), the best you can get is a simple substitution cypher, every A is changed to C, every D is changed to X, and so on. Obviously this sort of thing can be broken very easily.

PGP is good for another reason -- it's open-source. If you want to, you can verify that it is secure by checking the code. With closed source software from commercial vendors, you are forced to rely on their promises.
 
You could consider WinZip (or one of its many competitors). They normally provide an encryption option and can be mad as self-extracting packages

Good Luck
johnwm
________________________________________________________
To get the best from these forums read faq731-376 before posting

Steam Engine enthusiasts:
 
Encryption does not necessarily make the file size significantly larger. The reason for size increase is due to the fact that encryption algorithms are typically block encryption algorithms. RSA (asymmetric key-sender and recipient have different keys) and AES (symmetric key-same key used both ends) both require data to be processed in blocks which are powers of two large. If the data is not large enough to fill an entire block, it will be "padded" with fake data and encrypted. This is the reason for the apparent size increase. This usually only happens on the last block, so the max size increase you should see would be just a few hundred extra kilobytes, which on a large office or pdf file wouldn't make much difference. For example, I just encrypted a 3712KB file using 2048 bit RSA encryption, and the resulting encrypted file was 3794KB, hardly anything to worry about.

One thing you should know is that aysymmetric encryption such as used on PGP is orders of magnitude slower thatn symmetric key, which is why PGP is usually used to send/receive text, or exchange keys for a symmetric algorithm. Both methods are considered to be generally very secure, with the weak point usually being the user or the computer the data was encrypted on. A brute force attack on either (assuming a good key was used (i.e. randomly generated)) would be a waste of time.
 
Status
Not open for further replies.
Back
Top