{"id":64,"date":"2012-08-13T13:45:12","date_gmt":"2012-08-13T17:45:12","guid":{"rendered":"https:\/\/infotechguy.net\/?p=64"},"modified":"2025-02-22T13:15:56","modified_gmt":"2025-02-22T18:15:56","slug":"file-encryption-with-ccrypt-axcrypt","status":"publish","type":"post","link":"https:\/\/infotechguy.net\/?p=64","title":{"rendered":"Linux — Encrypt files with CCrypt, AxCrypt, and OpenSSL"},"content":{"rendered":"

Are you someone who keeps a text file on their Desktop with all there passwords in it? Do you write you account information and passwords on a sticky-note? I sure hope not! But if you do, consider encrypting that password file with high-grade encryption using reliable freeware.<\/p>\n

I will review three free encryption applications; CCrypt, AxCrypt, and OpenSSL.<\/p>\n


\n1. CCrypt <\/a><\/p>\n

Pros:<\/strong> I admire it’s simplicity, how easy it is to pop open a terminal and run the command:<\/p>\n

$ ccrypt -e file2encrypt.txt\r\n$ Enter encryption key: {your password}\r\n$ Enter encryption key: (repeat) {your password}\r\n<\/pre>\n
And you are left with an password encrypted AES file with the file extension CPT.
\nTo decrypt run the command:<\/p>\n
$ ccrypt -d file2encrypt.cpt\r\n<\/pre>\n
Before and After:
\n\"\"<\/a><\/p>\n
Cons:<\/strong> AES encryption using a passworde is only as strong as the password itself. The majority of attacks against the AES algorithm are brute-force and dictionary attacks. Therefore, I would recommend a password that is at least 12 characters long and contains, alphanumeric, symbols, etc. More information on password strengths vs brute-force attacks see here.<\/p>\n
2. AxCrypt<\/a><\/p>\n
Pros:<\/strong> great integration with Windows OS. Installable and context-menu integration, just right-click on a file and choose AxCrypt –> Encrypt. Check here <\/a>for screenshots and usability. Uses AES encryption which is well known and documented. Has the ability to make a Key-File to be used with encryption\/decryption. Conveniently Encrypt to exe(good and bad). Also, provided on their website is a portable Decrypt Only EXE. Allowing you to decrypt AxCrypt encrypted files without having to install the full application.<\/p>\n
Screenshots:
\n\"\"
\n\"\"<\/p>\n
Cons: <\/strong>Windows only specific, not cross compatible with other operating systems. (runs under wine <\/a>great!). AES 128-bit only.<\/p>\n
3. Openssl<\/a><\/p>\n
Pros:<\/strong> Free open source software. Widely know suite of encryption algorithms. Multi-platform compatibility. Advanced users.
\nOpenSSL Commands for AES256 encryption using password:<\/p>\n
openssl enc -aes-256-cbc -a -salt -in {file-to-encrypt} -out {encrypted-file-name}\r\nenter aes-256-cbc encryption password: {your password}\r\nVerifying - enter aes-256-cbc encryption password: {your password}\r\n<\/pre>\n
To decrypt:<\/p>\n
openssl enc -d -aes-256-cbc -a -salt -in {encypted file} -out {unencrypted file}\r\n<\/pre>\n
Notes: -a<\/strong> is used to run the encryption through base64 encoding. Useful for sending the encrypted string over email and such. -d<\/strong> is used for decryption.<\/small><\/p>\n
Screen captures:
\n\"\"<\/a><\/p>\n
Cons:<\/strong> Transferability. Meaning, if you don’t know what the original user encryption algorithm was then you won’t know which algorithm to use to decrypt.<\/p>\n
Sources:
\nAES Wikipedia<\/a>
\nCCrypt Web Site<\/a>
\nOpenSSL Command-Line HOWTO<\/a>
\nAbout AxCrypt<\/a>
\nHowToUse AxCrypt<\/a>
\nAxCrypt Screenshots provided by Softpedia<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
Are you someone who keeps a text file on their Desktop with all there passwords in it? Do you write you account information and passwords on a sticky-note? I sure hope not! But if you...<\/p>\n","protected":false},"author":2,"featured_media":4240,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[112],"class_list":["post-64","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux","tag-security-2"],"_links":{"self":[{"href":"https:\/\/infotechguy.net\/index.php?rest_route=\/wp\/v2\/posts\/64","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infotechguy.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infotechguy.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infotechguy.net\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/infotechguy.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=64"}],"version-history":[{"count":2,"href":"https:\/\/infotechguy.net\/index.php?rest_route=\/wp\/v2\/posts\/64\/revisions"}],"predecessor-version":[{"id":4276,"href":"https:\/\/infotechguy.net\/index.php?rest_route=\/wp\/v2\/posts\/64\/revisions\/4276"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/infotechguy.net\/index.php?rest_route=\/wp\/v2\/media\/4240"}],"wp:attachment":[{"href":"https:\/\/infotechguy.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=64"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infotechguy.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=64"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infotechguy.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=64"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}