Signal to noise ratio uninspiring - Seeking encryption advice

[thatguychuck]

I'm hoping to encrypt some non-data files and I'm having trouble finding a free solution, if one is available. There's a ton of information out there and it's been difficult to separate the wheat from the chaff. I'm asking for your thoughts or suggestions.

What I want to do:Encrypt image files (such as a passport and other official information

Comments

[thefile]

I've been using one or the other version of PGP for about 12 years.
I recommend the PGPi variety, myself (http://www.pgpi.org/). It's free, and compatable with all other versions of PGP - both the free, and non-free versions.

[atdt1991]

TrueCrypt is the only thing I've heard about in the last few years.

I do consider images to be data files, as they are information that is manipulated by applications.

But honestly, I'd just rename all files with various filenames and extensions email myself the proper names (so I could find the one I want later), and be done with it.

Who is going to mess with a folder of dll files? I mean, seriously, purloined letter methods are, IMO, simpler and have more "human factor" bonuses.

[specialagentm]

I'd recommend TrueCrypt. Very strong encryption and very easy to use. Safe enough to leave files laying around in plain site, being pretty damn sure that no one is going to brute-force crack them.

I use it on all my thumb-drives, as well as all the work data on my laptop.

TrueCrypt Rocks!

[eviljohn]

Another strong recommendation for TrueCrypt. I use it, it's quite good, and not difficult to use. It's how I encrypt my thumbdrive, and there's versions for Windoze and Linux.

[ericthemage]

I don't think I'd use Gmail for that. I'd set up a website and use FTP to store the files there after encryption and compression with ZIP and a funky password.

[agent00groovey]

Nah, there are plenty of zip password crackers available.

PGP is good, we use it at work all the time. Do they still have a free for personal use version?

Another possibility is GPG. I've never used it personally, but it's well regarded.

Security through obscurity works good for casual lookers, but a lot of applications are getting smart enough to look at the file header and determine what kind it is, extensions are relied upon less when you get outside of using Windows. If he wants to keep them safe, especially that kind of information.

[ericthemage]

That's why I mentioned setting up a site specifically for this, it's obscure if no one knows about the site. Put it in gmail, and people will know about the account.

I might even put the ZIP in an RK archive, in an ACE archive, in an ARJ, archive, etc. :)

[atdt1991]

All of this is quite true. Know your audience. Are you hiding from nosy neighbors? Professional criminals doing mass scrapes? Professional criminals looking for you, personally? The government?

I am only concerned with professional identity thieves (and so I leave little non-public identifying information on my computer) and nosy neighbors, for which the purloined letter is just fine.

If there's someone out there who wants to check the file headers of my computer, the one burgeoning with untold thousands of data files, they are welcome to be my guest. The only reason I know where anything is is because I put it there in the first place.

pgp is free even though they try to charge for it.

[guyfie]

Just download the trial version and let it expire. It magically turns into freeware.

http://www.pgp.com/downloads/desktoptrial.html

Zimmerman sez: "they still offer freeware versions for noncommercial use. When you click through to their page, you will see that they now call it trialware. Before you jump to the wrong conclusions, read the entire page, in detail, every word. It's still freeware. "

Re: pgp is free even though they try to charge for it.

[eviljohn]

Still, I'd prefer to use GPG. None of that silliness.

[flyinglemurs]

I was going to say PGP myself but looksl like many beat me to it.