Wednesday, January 09, 2008

Secure your USB Stick

If like me you like to carry sensitive data around on a USB stick you'll know the following two facts:
  1. It's incredibly useful to have your data with you.
  2. It's only a matter of time before you misplace the USB stick.
In order for this to be not a drama, you need to have the sensitive data encrypted. I've been using truecrypt for this purpose for a while, and it's a fantastic solution, with one major drawback - you need administrator privileges on the host machine - mostly not possible on client sites.

So I was glad to hear on the latest Security Now about omziff, a little non-installing app which can be used to encrypt and decrypt files. Simply download the exe, encrypt your sensitive data, pop the encrypted file plus the omziff.exe file onto your USB stick and you're good to go.

The feature set is not large, but what's there is done well. All the major modern open encryption standards are covered (e.g. Blowfish, IDEA, Rijndael, Twofish), and make no mistake, encryption with one of these algorithms is safe.

An extra feature which I really like is the shredder, which eliminates your sensitive files from the host machine after use, by writing random characters over the disk space multiple times. This is a program to help you sleep at night :-)

No comments: