Changes between Initial Version and Version 1 of SOP Encryption

Timestamp:

07/19/16 12:32:53 (8 years ago)

Author:

Richard Bramley

Comment:

--

SOP Encryption

@@ +1 @@
+= SOP Encryption
+
+Tags: [[Category_SOP]]
+
+ Guidelines:: [[http://systems.hscic.gov.uk/infogov/security/infrasec/gpg/acs.pdf|HSCIC Good Practice - Encryption]]
+
+== Spreadsheets
+
+For most purposes data will be sent in Excel Spreadsheets, which should be encrypted with a strong password (see below).  [[https://en.wikipedia.org/wiki/Microsoft_Office_password_protection|Excel 2007 onwards uses AES 128 bit encryption]], which is acceptable according to the HSCIC guidlines (above).  **Versions of Excel prior to 2007 should not be used.**
+
+== Files and Folders
+
+=== Zip Files with Passwords
+
+The easiest method of encrypting files and folders is to create a zip with a password.  However, there are a few problems with this.
+
+==== Windows XP
+Windows XP contains a function to compress a folder with a password. **THIS SHOULD NOT BE USED** as it is insecure.
+
+==== 7-Zip
+
+[[http://www.7-zip.org/|7-zip]] can be used to produce an encrypted file, but it relies on the recipient also having the 7-Zip program installed.  Self-extracting files can be created, but this requires emailing an executable to the recipient which can be problematic.
+
+- [[7-Zip HowTo Create an Encrypted Zip File]]
+
+==== GPG
+
+[[https://www.gnupg.org/|GPG]] is the open source implementation of PGP.  This is the preferred candidate for more complicated scenarios where public/private encryption is required.  This will require setting up at sender and recipient.
+
+There has been no case so far to use this technology.
+
+[[BackLinks]]