Link to home
Start Free TrialLog in
Avatar of Pau Lo
Pau Lo

asked on

More secure protection of files

I am aware words password protection is pretty lame and can be easily circumvented?

How do adobe PDF's password protection options compare?

If both are weak, is there an alternative FREE way to perhaps protect these files before sending them off via email, perhaps utilities built within compression tools?

I need some solution whereby the recipient of the email which contains an attachment of either PDF or docx/xlsx doesnt need to install any special software to open and gain access to it, above and beyond the password.

I am also aware that zip fles may cause issues with mail filters - which may cause an issue?
Avatar of Dave Howe
Dave Howe
Flag of United Kingdom of Great Britain and Northern Ireland image

Word documents past Office 97 or so are certainly not insecure - there is a big fuss over Rainbow Tables as though they were a magic bullet, but all they really are is a precalculated brute force table; by looking up the output of the brute force in a table (instead of trying each key in turn) you can rapidly get the key *provided it is in the table* - therefore, the key to secure word documents is to pick a key that isn't in the available rainbow tables (which in practice means 10 characters or more, and not made up of dictionary words) - PDF and many other encryption types are also subject to the same limitation.

For mail filters, password protected zipfiles are often blocked on sight - too many viruses have used this as a vector in the past. To a certain extent, office documents (which could contain macros) and pdf documents (which could contain scripts) are subject to scrutiny and may be blocked if they are encrypted, but less often than zipfiles are.
Avatar of Pau Lo
Pau Lo

ASKER

From a novice point of view, what changed post office 97 , and what algorithm is used for both word and PDF? Does their exist anywhere a site or list that lists all common encryption tools and features within software and what hashing algorithm they use. I searched a while back but nothing really showed up.

In a nutshell are we saying the passwords for docx and PDF if the user picks a strong password are good enough, and no 3rd party tool is required to add more protection to them? I was just going on hearsay that winzip has a stronger algorithm than office for passwords but maybe that is a myth....

Cheers
ASKER CERTIFIED SOLUTION
Avatar of Dave Howe
Dave Howe
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial