solara

FreeOTFE is awesome - you can choose from among several very good encryption algorithms. Most of the other encryption programs out there use WEAK encryption.

Zaniax

Originally Posted by solara

FreeOTFE is awesome - you can choose from among several very good encryption algorithms. Most of the other encryption programs out there use WEAK encryption.

... like blowfish ?



.

Zaniax

Originally Posted by cchiang12

...The issues I have with other file encryptor is that you can see the filename, and what type of file it is. ... Another thing is, the encryptor must use more than just numbers... that's another of my "thing" :) ...

No issue if you use Tombo ...



.

cawinters

I'm trying Tombo, but I have my tombo notes on my SD card and I can't figure out how to sync them with the Windows version without having them in main memory documents folder for active sync. Has anyone done this?

Zaniax

ActiveSync threads the tombo documents like all other files to be sync'ed - if they are placed in ...\My Documents\TomboRoot
The problem arises if you have changed the same tombo file on your pc and on your ax and then try to sync.
I do perform a sync each time I've made a change in the TomboRoot - wherever it's located.
When in doubt I consider my memory card to be master - with some care :p


.

solara

Originally Posted by Zaniax

... like blowfish ?.

From FreeOTFE site:

Quote:

# Hash algorithms include: MD5, SHA-512, RIPEMD-160, Tiger and many more # Cyphers include AES (256 bit), Twofish (256 bit), Blowfish (448 bit), Serpent (256 bit) and many more

TOMBO - 128-bit Blowfish
CCrryyppttoo - can't find encryption algorithm it uses
Resco Explorer - RC2 (40bit) or DES (56bit)
PocketRAR - 128-bit AES
PocketSecure - 128-bit AES
CryptoStorage - 192-bit AES
Sentry2020 - 128-bit CAST or 256-bit Twofish
Airscanner MobileEncrypter - 168-bit DES

Here's a new one I ran into File Barricader 2007 (FREEWARE): Uses 256-bit AES. Requires NET 2. It's a file/folder-based encrypter - not volume based like FreeOTFE, Cryptostorage, Sentry2020.
http://www.mysoco.com/Product.aspx?ProductID=8

-Remember, these programs all encrypt different things, using different methods. Some are file-based, file/folder-based, or volume-based. You can't compare them equally unless they are of the same class.
-For volume-based, I'd go with FreeOTFE - lots of algorithms to choose from (and the software does not need to be installed - just copy and run from card. You can also delete any algorithms and hashes you don't want to use to save space), free, and open-source. I wouldn't pay for Cryptostorage or Sentry2020, since FreeOTFE is free.
-For file/folder-based, File Barricader looks good, but it requires NET 2 - but I haven't tested this software.
-Tombo looks fine for what it's geared to do - a note manager with the ability to encrypt the contents of a specific folder (haven't used, but I don't need a notes manager, and I don't like the idea of a folder that screams out "Encrypted Files In Here!!!").
-I wouldn't use any software that does not publish the algorithm it uses.
-Resco Explorer is fine as a file manager and an all-in-one, but not a strong file encrypter. Airscanner is weak. And PocketRAR and PocketSecure are fine with regards to their encryption algorithm, but they are specialized programs geared more for compression and PDA-lockout respectively.

Zaniax

Yeah, solara ... I'm impressed
I just objected to your statement:
Most of the other encryption programs out there use WEAK encryption

Actually I only need one algorithm 'cause I just need something like a security lock on my house or my car - to prevent casual intruders.

And I think that the choice of password is the weak point of any security system


.

Kenjari

Originally Posted by PocketChange

Pocket Secure freezing up your Axim? Hmm... Strange! I have an x50v & x51v and most testing has been on them. Did you have it installed to main memory?

Thanks for the reply. I actually had it installed to my SD Card. I wonder could that have been the problem. I tried it three times but couldnt get it to stop locking up.

Kenjari

I tried both of the free programs listed above and they didnt work out the way I hoping....however thanks for the link and suggestion. (one of them i couldnt get working on my x51v).

I did download the resco explorer and it worked out pretty good. It didnt take as much space as I thought it would. Matter of fact it only stripped 1.75mb from the Ram (installed to SD CArd) It takes awhile to encrypt big files but its worth it. I do like the recycling bin component. I do find myself deleting stuff that I need later. So that works.

I have one question for those who do use Resco....

Is it possible to move the storage of the recycling bin to a storage card?

Zaniax

Thanks for the update, solara - very nice

You seems to be more concerned about your data than me, so what about eWallet - using 256bit RC4

I would like to use a volume based system but it's mandatory for me that it can be used on any PC as well as my axim - is that possible ?

It should be so secure that I can use my SD card or USB-memory from an Internetcafe without running (serious) risk

.

solara

FreeOTFE can be used on the PC as well as PPC. The same volume can be read on both platforms, as long as it was originally created on the PC first.

Quote:

# "Portable mode" included; FreeOTFE doesn't need to be installed before it can be used - making it ideal for carrying your data securely on USB drives! # Operates under both PC (MS Windows 2000/XP/Vista) and PDA (Windows Mobile 2003/2005) platforms # Linux compatibility (Cryptoloop "losetup", dm-crypt and LUKS supported)

So doesn't look like it supports Win98 - most volume-based programs don't. I can't be sure if FreeOTFE can be run from a Windows user account that does not have Administrative rights - as would be found on internet cafes. I don't need the ability to mount the volumes on the PC and PPC interchangeably, so on my PC, I use TrueCrypt - which is very similar to FreeOTFE.

Here's a nice overview of RC4 encryption: http://www.tmrfindia.org/ijcsa/V3I24.pdf

I use eWallet, but I would not place RC4 among AES, Serpent, Blowfish. RC4 has been broken, but at 40-bit. Practically speaking, it's good enough for casual use. But I feel better using an algorithm that hasn't been broken, even if it's at a lower bit.

http://ieeexplore.ieee.org/xpl/freea...rnumber=807231
http://www.jya.com/compkeys.htm

If you really want to secure your private info, use eWallet, but save the file within a FreeOTFE encrypted volume. It takes one more step to first mount the encrypted volume, then opening up eWallet, but that's as secure as you're going to get on a PPC.

Btw, both CodeWallet and eWallet use RC4. Flexwallet uses something a bit more robust - Blowfish, XOR, then the Tiny Encryption Algorithm. But that's not all there is to how secure the programs are. See this thread: http://www.pocketpcthoughts.com/arti...n=expand,16729

And yes, you're right. The weakest link in any security system is usually the password, not the encryption algorithm.

Zaniax

Seems that you really have done your homework, solara :approve:


.

PocketChange

Great summary up above there, Solara! Lots of helpful info.....

Originally Posted by kenjari

Quote: Originally Posted by PocketChange Pocket Secure freezing up your Axim? Hmm... Strange! I have an x50v & x51v and most testing has been on them. Did you have it installed to main memory? Thanks for the reply. I actually had it installed to my SD Card. I wonder could that have been the problem. I tried it three times but couldnt get it to stop locking up.

Installing PS to the storage cards can have different affects on some devices. Lockups are unusual, but possible!


Generally speaking.... The best security is accomplished when multiple layers are used. Passwords alone, or even just encryption are just good to a certain point, but when combined, do a much more effective job!
An upcoming version of Pocket Secure will add yet another level. Simply having access to the already encrypted files will be restricted, while still locking out access to the rest of the device. A thief would have to work thru 2-3 levels of security to get to chosen info, and not even have the ability to see them while the device is locked....

Amamba

Originally Posted by solara

FreeOTFE can be used on the PC as well as PPC. The same volume can be read on both platforms, as long as it was originally created on the PC first. So doesn't look like it supports Win98 - most volume-based programs don't. I can't be sure if FreeOTFE can be run from a Windows user account that does not have Administrative rights - as would be found on internet cafes. I don't need the ability to mount the volumes on the PC and PPC interchangeably, so on my PC, I use TrueCrypt - which is very similar to FreeOTFE. Here's a nice overview of RC4 encryption: http://www.tmrfindia.org/ijcsa/V3I24.pdf I use eWallet, but I would not place RC4 among AES, Serpent, Blowfish. RC4 has been broken, but at 40-bit. Practically speaking, it's good enough for casual use. But I feel better using an algorithm that hasn't been broken, even if it's at a lower bit. http://ieeexplore.ieee.org/xpl/freea...rnumber=807231 http://www.jya.com/compkeys.htm If you really want to secure your private info, use eWallet, but save the file within a FreeOTFE encrypted volume. It takes one more step to first mount the encrypted volume, then opening up eWallet, but that's as secure as you're going to get on a PPC. Btw, both CodeWallet and eWallet use RC4. Flexwallet uses something a bit more robust - Blowfish, XOR, then the Tiny Encryption Algorithm. But that's not all there is to how secure the programs are. See this thread: http://www.pocketpcthoughts.com/arti...n=expand,16729 And yes, you're right. The weakest link in any security system is usually the password, not the encryption algorithm.

A very good summary. I'm in the same boat - TrueCrypt on PC, FreeOTFE on PPC. I actually tried to switch to FOTFE completely but had problems when copying relatively large amounts of info from TC container to FO container. They are probably not as much FO as system problems but I stuck with TC for now. No problems with containers around 10mb, all I need on PDA anyway.

I also used eWallet but because of its large size, lots of icing (which I consider bloat) and relatively weak algorhytm I went to KeePass - a nice little program that supports AES and Twofish and has a very good desktop client.

Jogga

Spb Pocket Plus (a Today screen plugin) also enables file encryption albeit one at a time. Worth remembering if you have the current version.