Here is one source from PCMAG, one of their premium utilities,
http://www.pcmag.com/article2/0,1895,1178717,00.asp
ShellCrypt uses the Blowfish algorithm, a
well-known and widely used cipher, to encrypt your files. Because of
export restrictions covering cryptography, ShellCrypt is limited to
56-bit encryption and only the first seven characters of your password
are significant when encrypting a file. When accessing the ShellCrypt
utility itself, the entire password is utilized
And I think I saw this cavet in Winzip 10, AES 256 I remember I tried True Crypt .... but there was something about it I didn't like. I guess I will have to take another look at it.
At 05:27 PM 6/13/2006, you wrote:
Truecrypt is open source and really a great product. I didn't see any
key length limitations, it supports files, folders, partitions, disks,
removables, everything. And it is completely configurable for how
much paranoia you have. It uses AES-256, Blowfish (448-bit key),
CAST5, Serpent, Triple DES, and Twofish.
Oh and its free :)
On 6/13/06, Thane Sherrington <[EMAIL PROTECTED]> wrote:
At 09:09 PM 13/06/2006, Winterlight wrote:
>I use Paragon Encrypted Disk 3.0 This is Blowfish encryption, can do
>an entire volume, by a key on a remote device or password. Can, if
>you wish, do auto mount at boot, and can be tweaked by the command
>line. I bought it about a year ago, I use 3 encrypted volumes daily,
>and never had a single problem. Plus it is a German company and not
>subject to U.S. key limitations, like U.S. Companies are. A good
>product, not a lot of bells and whistles, but you can trust it with your data.
Too bad Britain is making it illegal to withhold one's password if
one is asked by the authorities - I'm sure the US and Canada will
follow. TrueCrypt gives you the ability to make virtual drives that
appear to be files full of noise (even the empty part is filled with
random bits) so you can use plausible deniability - "What? No,
that's not encrypted, that's just a corrupted file."
T
--
Brian
