67
What is the best way to encrypt a USB drive that can be used on multiple OSes? (lemmy.today)
submitted 2 years ago* (last edited 2 years ago) by to c/privacy@lemmy.ml
27 comments fedilink hide all child comments
 

Not sure is this is the best place to post this question, but wondering what is the best way to encrypt a usb drive?

Want to be able to carry an encrypted flash drive with me but also be able to unlock it, if possible, on various OSes. Preferably with some kind of portable software. Something similar to the method that comes with the Kingston Data Traveler USB drives.

Edit: Seems like Veracrypt and Cryptomator are the best options to check out. Thank everyone!

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 2 years ago (1 child)

Encrypted ZIPs are very trivial to break. I can break it with a simple python script.

For instance, Microsoft does that for all encrypted ZIPs

https://arstechnica.com/information-technology/2023/05/microsoft-is-scanning-the-inside-of-password-protected-zip-files-for-malware/

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago* (1 child)

    ZIP isn't a good way to encrypt, but what Microsoft is doing is simply reading the email, and decrypting zips with the password found in the email body.

    All encryptions schemes can be trivially broken if you have the key. It's not even breaking, it's just normal decryption.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    No, zip encryption is very weak. Thus is because million of combinations can be tried very quickly

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago* (1 child)

    While that's true, but there's no indication of Microsoft brute forcing with million of combinations.

    The article you link says Microsoft is only trying a few obvious passwords: the filename, and words found in the plaintext message.

    Proper encryption isn't just about using a strong algorithm. It's also about proper key management, ie not sending the password in the clear via the same channel as the encrypted files.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago

    Well no ZIP is not secure. There is a plethora of software that can brute force it.

    Do not trust zip encryption. It is not secure and it will likely never be secure. It is like storing your passwords on a spreadsheet

  • permalink
  • fedilink
  • source
  • parent