STANDARD ENCRYPTION

Support

ENCRYPTION ALGORITHMS AND HASH FUNCTIONS
(FPS-FE edition)

The application includes the following standard encryption algorithms:

Advanced Encryption Standard (block size of 128 bits, key lengths: 128, 192 and 256 bits)
Blowfish
Haval (256 bit, 5 passes)
CAST-128 (CAST-5)
CAST-256 (CAST-6)
Information Concealment Engine (ICE)
Information Concealment Engine 2 (ICE-2)
ICE Encrypt
MISTY-1 (Mitsubishi Improved Security Technology)
Ron's Code 2 or Rivest's Cipher 2 (RC-2)
Ron's Code 4 or Rivest's Cipher 4 (RC-4)
Ron's Code 5 or Rivest's Cipher 5 (RC-5)
Ron's Code 6 or Rivest's Cipher 6 (RC-6)
Serpent
Tiny Encryption Algorithm (TEA)
Twofish

Affordable hash functions:

Secure Hash Algorithm 1 [SHA-1]
RIPEMD-160
Haval [256 Bit, 5 passes]
Message Digest 5 [MD-5]
Message Digest 4 [MD-4]
Tiger
RIPEMD-128
SHA-256 (SHA-2 family)
SHA-384 (SHA-2 family)
SHA-512 (SHA-2 family)

To check if the crypto-primitives listed in this way are available, select from the main menu of the control panel Encryption - Check crypto primitives or use the key combination [ Shift+Alt+C ]

FPS - Check Crypto Primitives

Note: You can also use the tool button, which is located on the control panel, to activate the control module.

If this information was useful to you, please click on Like.

Support

ENCRYPTION MODES
(FPS-FE edition)

File Protect System includes standard and non-standard encryption methods.

The standard ones can include the use of block and streaming ciphers, and the non-standard ones EOQUANT, the use of digital objects (files or web-based applications), Black Box encryption, etc..
In addition, there is a hybrid encryption that combines standard and non-standard methods.

The selection of the encryption mode is done through the encryption settings system.

In order to activate the control panel for selecting the encryption mode, it is necessary to select Encryption - Crypto settings from the main menu or to use the keyboard shortcut [ Ctrl + K ].

You can also use the dedicated button, which is located on the control panel as shown in the image.

FPS - Set encryption mode

As a result, the module will be activated, which will allow you to configure the encryption system according to your needs.

If necessary, you can specify that the encrypted information will be associated with the hardware used. In practice, this would eliminate the use of encrypted information on another computer, even if you use exactly the same crypto-primitives and user password.

To activate this feature you need to check the Hardware dependency field.

This is one of the elements of the DLP security system included in the application.

FPS - Set encryption mode

IMPORTANT!

File Protect System provides the ability to encrypt the selected file or save the selected file in unencrypted form and save the encrypted file in a specified directory.

The second case is used when the files need to be stored in encrypted form on external media and / or to be transferred for further processing.

To enable this option you must check the Encrypt in selected folder field.

By default, the directory where the encrypted files will be saved is C: \Users\Public\Documents\FPS\Process\ Encryption, unless otherwise specified.

This also applies to the decryption process.

If you want to keep the source data in encrypted form and save the decrypted information in a selected folder or external device for operational use, you must check the Decrypt in selected folder field.

By default, the directory where the encrypted files will be saved is C:\Users\Public\Documents\FPS\Process\Decryption, unless otherwise specified.

If you wish, you can create an automatic archive (save copies) of the source files that you use in the encryption and decryption process.
To do this, you need to check the Backup source files box.
By default, the directory where copies of the source files will be stored is C:\Users\Public\Documents\FPS\Process\ Backup, unless otherwise specified.

IMPORTANT!

Before starting to work with the system, it is good to configure the combination of crypto-primitives that will be used.

If this information was useful to you, please click on Like.

Support

CHOICE OF CRYPTOPRIMITIVES
(FPS-FE edition)

The choice of crypto-primitives is a key feature in the File Protect System

Unlike other types of encryption systems, it is possible to use different combinations of crypto-primitives, which guarantees a much higher degree of protection.

Selection of file encryption primitives

Activation of the file encryption module can be done in two ways as follows:

By selecting the function from the main menu of the control panel, Encryption - File crypto settings, or by using the key combination [ Ctrl + F7 ];
By means of the corresponding system button from the encryption setup module.

FPS - File crypto settings

The module for setting up the crypto process allows the selection of an encryption algorithm, encryption mode, hash function, entering the current password, etc.

Also, the selected combination of crypto-primitives can be stored or modified according to current needs.

FPS - File crypto settings

The module include the following system buttons:

Load combination of crypto-primitives.
Save combination of crypto-primitives.
Create system report
Test encryption of the selected file.
Test decryption of the selected file.
Enter the settings in the system
Restore settings to their original state
Delete settings
Select a file to be encrypted (or decrypted).
Select a file in which the result of the encryption (or decryption) will be stored.
Cancel changes made.
Operational verification of selected crypto-primitives.

Testing crypto-primitives

Testing the combination of crypto-primitives is crucial for the proper conduct of encryption and decryption processes.

In order to perform the test, you need to select a file that will be encrypted. This is done by clicking on the double arrow selecting the file to be encrypted. As a result, the file explorer is activated and a file is selected to be used for test encryption.

FPS - crypto-primitives

It is recommended that the result of the encryption process be saved in a file with a different name so that a better comparison of the results can be made.

Once the file is selected, click the Encryption button or use the key combination [ Alt + F9 ]. This will allow the file to be encrypted using the selected combination of crypto-primitives, and the results of the process will be recorded in the control table for further analysis. In this way, the operability of the selected set of crypto-primitives will be checked and the parameters of the encryption process will be determined.

FPS - crypto-primitives

The test for decrypting files is performed by clicking on the Decrypt button or using a key combination [ Alt + F10 ] as shown in the image.

FPS - crypto-primitives

IMPORTANT!

It is important to make sure that the decrypted file is absolutely identical to the source file (the file that was encrypted).

Only if the two files are identical can you proceed to record the selected set of crypto-primitives.

If the process is completed successfully, the encryption indicator will be green and the decrypted indicator will be orange. This means that the resulting (encrypted) file is ready for decryption.

FPS - crypto-primitives

Note: If the cipher used is block, the initialization vector (IV) will be used in the encryption process, the value of which is displayed in hexadecimal in the corresponding field.

IMPORTANT!

It is recommended that the combination of crypto-primitives used and tested be properly documented.

To do this, the File Protect System includes an official reporting system that automates this process.

To prepare a report, simply click on the Report button as shown in the image or use the key combination [ Ctrl + P ].

FPS - crypto-primitives

System reports can be printed as well as exported in various formats such as PDF, HTML, RTF, etc ..

FPS - crypto-primitives

Note: You can find more information about system reports in the appropriate section.

Once a combination of crypto-primitives is selected and verified, the information about them needs to be entered into the system. This is done by clicking on the Apply settings button or using the key combination [ Ctrl + Enter ].

FPS - crypto-primitives

This puts the system ready for encryption.

IMPORTANT!

If the used crypto-primitives are not pre-configured, the standard encryption will be performed using the default settings.

For the FE version of Fillet Protect System they are as follows:

Encryption algorithm - Twofish;
Encryption mode - OFB;
Hash function - SHA-384 [ SHA-2 family ].

If necessary, the default settings can be restored by clicking the Trash button or using the key combination [ Alt + Del ]. In this case, the crypto system will be restored to its original appearance, which it had after installing the application.

If you use Refresh or [ Alt + F5 ], the system will restore the last entered settings that have been checked and approved for use.

If this information was useful to you, please click on Like.

Support

SINGLE FILE ENCRYPTION

Encryption of FPS files can be performed on all files, regardless of their format.

Before we start encrypting the file, we need to decide whether to keep a backup, as well as make sure that the selected file is no longer encrypted.

IMPORTANT!

It is absolutely forbidden to encrypt or decrypt files that are opened with other applications.

If any of the files is open, it should be closed before encrypting. Failure to do so may result in irreversible damage to the files.

If it is decided to store a copy of the source files in unencrypted form, it is necessary to indicate this in the settings of the crypto process. For this purpose, the Backup the source file field needs to be checked as shown in the image.

FPS - Backup source files

Unless otherwise specified, the source files will be copied to the directory specified in the Backup directory field.
It is also possible for the directory where the backups are stored to be user-selectable, which can be an external device or a hybrid cloud.

IMPORTANT!

Good practice requires backups to be stored in secure containers.

For FPS, Data Cases are used for this purpose, which are the subject of a separate topic.

FPS - Backup source files

Note: In order to avoid possible risks, the FPS provides a mechanism for gratuitous destruction of backups in case of need.

It is crucial before encrypting files to make sure that they are no longer encrypted and / or corrupted. For this purpose, the FPS provides a set of tools for checking files, as well as a built-in visualization system.

FPS - File encryption

Once the file is selected in Shell list, we can proceed with its encryption. To do this, click on the Encrypt button located in the control panel or use the key combination [ Alt + F9 ].

FPS - File encryption

As a result of these actions, the module for entering and controlling the user password will be activated, as shown in the image.

FPS - File encryption

If the Confirmation required field is checked, the user will be required to repeat the entered password to avoid errors. An automatic assessment of the reliability of the password used is also performed. If the indicator light in the upper right corner is green, the password is strong enough.

IMPORTANT!

Even if no password is entered, encryption will be performed. However, if the Cancel button is clicked, the encryption process will be terminated immediately.

Using a user password is not a reliable enough mechanism in the encryption process. It poses many proven risks. In order to avoid them in the FPS, a mechanism for the use of control strings is provided.

FPS - File encryption

If the encrypted file is a digital image, PDF, MS Office or other similar format, it will not be able to be displayed.

Note: Marking with a special symbol (padlock) in the upper left corner is possible only with a special setting of the system encryption process, which is discussed in the relevant section.

FPS - File encryption

The file encryption process is documented automatically, unless otherwise specified. To view the system report, you need to click on the Report button located on the control panel, or use the key combination [ Ctrl + P ]

FPS - File encryption

If this information was useful to you, please click on Like.

Support

SINGLE FILE DECRYPTION

Only encrypted files are subject to decryption, and it is mandatory to use the crypto-primitives used in the encryption process.

Before proceeding with encryption, there must be an absolute belief that the file is encrypted and the information about the crypto-primitives used is reliable.

It is absolutely forbidden to decrypt unencrypted files with block ciphers.

IMPORTANT!

Decrypting unencrypted files may result in damage free of charge, after which they will not be recoverable.

To avoid such a risk, it is recommended that backup copies of encrypted files be used.
If it is decided to store a copy of the source files in unencrypted form, it is necessary to indicate this in the settings of the crypto process. For this purpose, the Backup the source file field needs to be checked as shown in the image.

FPS - Backup source files

IMPORTANT!

Good practice requires backups to be stored in secure containers.

For FPS, Data Cases are used for this purpose, which are the subject of a separate topic.

FPS - Backup source files

Note: In order to avoid possible risks, the FPS provides a mechanism for gratuitous destruction of backups in case of need.

Decryption should be started only if we are absolutely convinced that we know all the parameters of the crypto process and are able to restore the encrypted files in their original form. Good practice requires that the process be well mastered before proceeding to encrypt / decrypt files, using a system to test the crypto-primitives used.

FPS - File decryption

Once the file is selected in Shell list, we can proceed with its encryption. To do this, click on the Decrypt button located in the control panel or use the key combination [ Alt + F10 ].

FPS - File decryption

As a result of these actions, the module for entering and controlling the user password will be activated, as shown in the image.

IMPORTANT!

The panel for entering the password when decrypting differs from the panel used in the process of encrypting files.

Note: In the FE version, no confirmation of the entered password is required for decryption. This assumes that the user is using a valid decryption password. This is an element of the DLP system included in the FPS.

FPS - File decryption

IMPORTANT!

Even if no password is entered, encryption will be performed. However, if the Cancel button is clicked, the encryption process will be terminated immediately.

Once the file is successfully decrypted, it will be restored to the way it was before it was encrypted.
This can be easily checked if the built-in visualization system is used.

FPS - File decryption

The file encryption process is documented automatically, unless otherwise specified. To view the system report, you need to click on the Report button located on the control panel, or use the key combination [ Ctrl + P ]

FPS - File decryption

If this information was useful to you, please click on Like.

Support

ENCRYPTION OF SELECTED FILES AND FOLDERS

FPS Enables automatic encryption of selected files and folders.

This form of encryption can be done in three different ways as follows:

Encryption of selected files and folders by selecting them in the field containing information about the selected directory.
Encryption of files, information about which is contained in specialized crypto packages ( Using specialized crypto packages ).
Encrypt files and folders that are saved secure containers ( Using protected data cases (secure digital containers, SDC) ).

Each of these forms of encryption has its own specifics, and some of them are subject to separate consideration.

FPS - File encryption

Prouddsl154

How do I recover a password

Support

Prouddsl154

Hello,

The user password is the end user's choice.

The user password is not a secret key.

Encryption is performed using secret keys unless the user has explicitly specified using PKDF, which binds the secret key to the access password.

The user password only guarantees administrative access to the management of cryptographic primitives.

First of all, check the backup copies of the encrypted data.

You should dumb them down unless you have turned off the backup generation system.

The official copies of the encrypted data are located in the following directory:

C:\Users\Public\Documents\FPSII\Backup

unless you have specified another.

File Protect System backup

Backups are stored as standard ZIP archives.
When previewing the contents of the archive, you should see the personal identification number, which should match yours.

File Protect System backup

In this case, you don't need to use any password to recover your files.

It is also important to specify which of the encryption applications you are using.

We hope you found this information useful.

We remain available for questions.