On Wed, Jul 02, 2003 at 07:51:57PM -0400, MrWitch wrote: > I was wondering what software, if any, the LEM community uses or feels > is the best. Both Mac and PC software packages, and as far as Mac > software goes, for OS 9.x and OS X. > > To make my message relevant to the PCI list, I will be using this > software on my 7300/200 running OS 9.1 and OS X 10.1.5. as well as my > PeeCees. > > This is what I am looking for in encryption software: > > symmetric and asymmetric encryption, using strong algorhythms. AES, > 3DES, DH/DSS, and similar. > Must be capable of large keys: 4000+ -bits or better
Any reason you think you need "4000+ bit" cryptography? For asymmetric crypto, there have been a few people saying 1024 bit crypto _may_ have a chance at getting cracked in our lifetime. If that bothers you, 1536 or 2048 bit crypto would be more practical. 4096 bits can really slow things down. For symmetric crypto, such high key sizes aren't available in popular cryptographic algorithms, AFAIK. You won't see anything much higher than 256 or 384 bits. > Must have a plugin for OS X Mail.app (PC: for Mozilla Mail v.1.4) > As far as file encryption software goes, must be able to encrypt > file-by-file (or a folder/directory). No disk-image (or container) > software. > Encrypted files MUST be able to be decrypted on both PC and Mac systems > (either by the same software on both platforms, or by different software > on each platform) PGP will do per-file encryption. So will GnuPG, if you're okay with using the shell (command-line interface). Both will allow you to secure a file with either a passphrase, or one or more recipient public keys. There are GnuPG front-ends to make things easier, but I'm not familiar with any. Theoretically OpenPGP-compliant software should be compatible. This includes PGP and GnuPG. I'm pretty sure there are GnuPG plugins for Mozilla. Try <http://www.mozdev.org/>. > a CD-R/-RW encryption package would be nice, too. > > This is because I'd like to keep my private keys, passwords/passphrases, > and other sensitive items on a CD, and encrypt it so nobody but myself > can use them, but all I have to do is put the disc in the drive and use > the keys & stuff normally. First, realize that your private keys are already encrypted with your passphrase. That is the only function the passphrase serves: to encrypt your private key in case the media is recovered by an attacker. Also, you mentioned earlier you don't want any sort of disk-image type cryptographic application. I'm not sure how you're going to be able to use keys and other files "normally" without using that kind of software. Unless you're okay with decrypting individual files from CD-ROM. Don't forget to make several copies of your CDs; they tend to be very unreliable. You may also want to look into small-capacity USB key-ring drives. -- - J.P. Larocque, <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]> - Encrypted e-mail preferred; 0x0c14cdda; http://ely.ath.cx/~piranha/pgp - Choosy perverts choose GIF. -- PCI-PowerMacs is sponsored by <http://lowendmac.com/> and... Small Dog Electronics http://www.smalldog.com | Refurbished Drives | -- Sonnet & PowerLogix Upgrades - start at $169 | & CDRWs on Sale! | Support Low End Mac <http://lowendmac.com/lists/support.html> PCI-PowerMacs list info: <http://lowendmac.com/lists/pci-powermacs.shtml> --> AOL users, remove "mailto:"; Send list messages to: <mailto:[EMAIL PROTECTED]> To unsubscribe, email: <mailto:[EMAIL PROTECTED]> For digest mode, email: <mailto:[EMAIL PROTECTED]> Subscription questions: <mailto:[EMAIL PROTECTED]> Archive:<http://www.mail-archive.com/pci-powermacs%40mail.maclaunch.com/> Using a Mac? Free email & more at Applelinks! http://www.applelinks.com
