Armitage 2.0

Hardly a week goes by when I don't see yet another story about government spying. Even if you still trust the government (who has a long history of stealing, abusing, and even losing your personal data) they are not alone. Companies (such as AT&T, ISPs, etc.) and computer criminals are all after your data. To make matters worse, this is usually pretty easy over the internet.

Everything on the Internet is sent over multiple servers, any one of them could be reading your data. To protect your data, you need to encrypt it. Encryption takes your information and scrambles it, making it unreadable to anyone without the correct keys or password. Here's a list of 36 programs to help you get started.

# Disk

• TrueCrypt - On-the-fly encryption for Windows and Linux which can be used to encrypt entire disks (including memory sticks). Featured on Security Now #41 with Leo Laporte and Steve Gibson.


• Scramdisk - On-the-fly encryption for Windows 95-98-ME.


• DriveCrypt - Disk encryption for Windows 2000/XP/+.


• FreeOTFE - Free On-the-fly encryption which works with Win2000/XP and Linux (via CryptoLoop).


• CrossCrypt - Another On-the-fly encryption program for Windows 2000/XP.


• Eraser - File wiping program used to securely delete files (by overwriting them multiple times) so they can not be restored by any means (unlike just deleting the file).

# Web Browsing

• Tor - A toolset that encrypts and anonymizes your Web, Instant Messaging, IRC, SSH, and other internet applications.


• Torpark - Portable browser by Torrify based on firefox with access to Tor built in and is upgradeable (for a price) to high speed anonymity services.


• OperaTor - Portable version of the Opera Browser setup with Tor.


• Cygwin - Can be used to create your own secure proxy, see this article at lifehacker for more info.


• FreeNet - Free software which lets you publish and obtain information on the Internet without fear of censorship.

# E-Mail

• PGP - Probably the most famous encryption and authentication program, PGP use's public-key cryptography and is primarily focused on encrypting your communications. PGP is Free for personal use, but to unlock some other features you need to purchase it.


• GnuPG - Similar to PGP, supports the OpenPGP standard (meaning it can communicate with PGP and similer programs). Unlike PGP, GnuPG supports Windows, Linux and other operating systems. GnuPG is a command line program (meaning no graphical interface like most windows users will be familiar with) so if you need a point and click solution you will probably want to check out Gpg4win which comes with a graphical interface and a set of plugins for your email programs. GPG and Gpg4win are both FREE and Open Source.


• Hushmail - Provides secure private web-based email accounts with encryption (to the server, end-to-end with other hushmail users), virus scanning, and spam filtering all automatic. The basic email and IM service is free, but limited.


• Gmail - Free web based email service with advanced features including encrypted (SSL/TLS) client-to-server communications. To take advantage of this encryption, you must specify by adding an "s" to the http protocol indicator (https://). (Note: There may be other privacy concerns with gmail.)

# Instant Messaging

• Google Talk - GTalk use's encryption from the client to server, but not end-to-end. Google plans to add support for call and chat encryption in the future.


• Hush Messenger - Offers transparent end-to-end strong encryption.


• AIM Encrypt - Free Security Certificates for AIM that encrypts your communications.


• Gaim-Encryption - Plugin for the popular GAIM instant messenger to encrypt communications with other users of this plugin.


• Off-the-Record Messaging - Allows you to have private conversations over instant messaging by providing Encryption, Authentication, Deniability, and Perfect forward secrecy. Get it for Miranda, GAIM (GAIM Portable), and Trillian.


• SimpPro - (Paid) Encrypts communications with other SimpPro or SimpLite users using MSN, Yahoo, ICQ, AIM, Jabber, and Google Talk. Protects MSN, ICQ, and AIM file transfers. FREE (limited) versions for Yahoo, MSN, ICQ/AIM, and Jabber/Google.


• ZoneLabs IM Secure - (Free and paid versions) Automatically encrypts instant messages over any protocol, any program (AIM, MSN, ICQ, Yahoo, GTalk, Google, Trillian, Miranda, Gaim, etc.) between users of this program.


• BitWise IM - Stand alone program for Encrypted Cross-Platform Instant Messaging for Windows, Mac OS X, and Linux. Text, Files Transfers, Whiteboards, Voice & more.


• Miranda - has a SecureIM plugin.


• Trillian - has a Secure IM feature for AIM and ICQ protocols.


• Jabber - Some Jabber servers use SASL and TLS.

# Other

• Zfone - Software for secure voice communication over the internet created by Phil Zimmermann (the creator of PGP) and using the ZRTP protocol. Successor to PGPfone.


• Nautilus - Windows and Linux software for secure voice communication over the internet. Runs from the command line.


• CryptoPhone - Offers worldwide protection for your confidential phone calls- whether by GSM cellular network (850, 900, 1800, 1900 Mhz), satellite or land line.


• MySecureISP - Provides a secure connection for web browsing, IM, email, etc. Encrypts the connection from your existing ISP.


• Top Secret Messenger (TSM) - secure public-key encryption with fully and seamlessly integrated plugins for popular instant messengers and e-mail clients such as ICQ, MSN, Miranda, and Outlook. Limited trial version.


• Mircryption - Blowfish encryption for mIRC channels, private messages, DCC Chats, actions, and topics.


• mIRC SSL - How to use SSL with mIRC.


• EncrIRC - IRC encryption proxy "because IRC SSL does not save your from the voyeur sysadmin" (for Linux).


• Invisiblog - Lets you publish an anonymous weblog using GPG and the Mixmaster anonymous remailer network.


• SuperGenPass - Encrypts your password so every site has a different, more secure password and you only have to remember the one.

As a general rule, you should never send anything you don't want the entire world to know over the internet in plaintext and you should probably encrypt everything possible so your sensitive information doesn't stand out.

For common questions and answers check out the Security and Encryption FAQ.

If I missed something, feel free to leave a comment.