Repository navigation
AESCrypt 3.5 Argon
Security Features in AESCrypt v3.5
-
AES-256-GCM Encryption:
- This version implements AES-256 encryption in Galois/Counter Mode (GCM), providing both confidentiality and integrity. GCM is designed to be efficient and secure, ensuring that encrypted data is protected against unauthorized access while also preventing tampering.
-
Key Derivation with Argon2id:
- Utilizes Argon2id for key derivation, which is resistant to both GPU and side-channel attacks. The key derivation function (KDF) parameters are adjustable, allowing for customization of time cost, memory cost, and parallelism to enhance security based on user requirements.
-
Improved Password Hashing:
- The implementation now includes strong password hashing using Argon2id, ensuring that user-provided passwords are transformed into secure keys. This adds an extra layer of protection against brute-force attacks.
-
HMAC for Data Integrity:
- An HMAC (Hash-based Message Authentication Code) is computed and stored alongside encrypted data. This ensures that any modifications to the encrypted content can be detected during decryption, thus providing a safeguard against data integrity breaches.
-
Secure Deletion of Original Files:
- The original files are securely deleted after encryption, ensuring that sensitive data cannot be recovered through standard file recovery methods. The file contents are overwritten with random bytes before deletion.
-
Salt and IV Generation:
- A unique salt and initialization vector (IV) are generated for each encryption operation, enhancing security by ensuring that identical plaintexts do not result in identical ciphertexts.
-
User-Generated Passwords:
- Users can generate strong, random passwords using a built-in function, which uses a secure method to ensure that passwords are unpredictable and resistant to guessing attacks.
-
User Interface Enhancements:
- The graphical user interface (GUI) includes warnings and instructions to guide users through the encryption and decryption processes, ensuring that best practices are followed.
-
Batch Encryption:
- The ability to encrypt entire folders at once, allowing users to secure multiple files efficiently while ensuring each file is independently encrypted with robust security measures.
-
Secure Memory Clearing Feature
- In order to enhance security, AESCrypt 3.5 Argon implements a feature that ensures sensitive information, such as passwords, is securely cleared from memory after use. This helps prevent unauthorized access to sensitive data that may linger in memory.