Secure Encrypted way of sharing files with other companies

[scoobs]

Hi

I need to share sensitive documents with other companies, now what is free out there and if its paid what would you suggest ? as long as its encrypted it will help

Can FTP do this ?

 

[Neo_X]

Depending on how often/constant this sharing is, i would recommend an encrypted VPN tunnel between the companies, and then FTP or similar way to share the data?

OpenVPN should work well (i run ours on a Pfsense Firewall)

 

[scoobs]

Depending on how often/constant this sharing is, i would recommend an encrypted VPN tunnel between the companies, and then FTP or similar way to share the data?

OpenVPN should work well (i run ours on a Pfsense Firewall)

yeah thats what i thought but thinking in to it its going to be a IT guys nightmare to configure all of this

 

[Bobbin]

SharePoint over https perhaps?

Also I haven't seen one personally but I believe the Cisco Meraki devices are a pleasure to configure site to site vpn. Not 100% sure though.

 

[itareanlnotani]

Owncloud or similar sharing apps. FTP doesn't provide for encryption. SFTP does for transfers, but not on the filesystem.

owncloud.org

 

[Randy_The_Squirrel]

Ok isn't this the same thing as dropbox, only encrypted to the hilt?

 

[scoobs]

yeah might be i need end to end encryption

 

[Messugga]

sFTP or SCP are popular standards for the big listed companies to chat to each other, in SA.

 

[Johnatan56]

RAR or 7zip it with a complex password and send? Just be sure to encrypt file names as well.

7-Zip also supports encryption with AES-256 algorithm. This algorithm uses cipher key with length of 256 bits. To create that key 7-Zip uses derivation function based on SHA-256 hash algorithm. A key derivation function produces a derived key from text password defined by user. For increasing the cost of exhaustive search for passwords 7-Zip uses big number of iterations to produce cipher key from text password.

WinRAR offers you the benefit of industry strength archive encryption using AES (Advanced Encryption Standard) with a key of 256 bits.

 

[scoobs]

RAR or 7zip it with a complex password and send? Just be sure to encrypt file names as well.

yeah simple cheap and effective

 

[Randy_The_Squirrel]

RAR or 7zip it with a complex password and send? Just be sure to encrypt file names as well.

This means the file is out there, in the wild, even though it is encrypted. Down the road they might find a flaw in the crypto and all the secrets are then vulnerable? I think the OP is looking for something that allows file sharing without the risk of those documents being intercepted on the open internet, irrespective of whether they are encrypted or not.

 

[scoobs]

This means the file is out there, in the wild, even though it is encrypted. Down the road they might find a flaw in the crypto and all the secrets are then vulnerable? I think the OP is looking for something that allows file sharing without the risk of those documents being intercepted on the open internet, irrespective of whether they are encrypted or not.

Yeah Hit the nail on the head

 

[sajunky]

Constantly available sharing from one to many or occasional peer to peer on demand?
If later, consider simple IM solution like Telegram desktop client. Share encrypted files on normal chats, pass encryption keys using secret chats with expiry option.
http://www.telegram.org

 

[Randy_The_Squirrel]

Constantly available sharing from one to many or occasional peer to peer on demand?
If later, consider simple IM solution like Telegram desktop client. Share encrypted files on normal chats, pass encryption keys using secret chats with expiry option.
http://www.telegram.org

Using Telegram for this sort of thing on another project... however the crap comes in on Apple devices, it pushes the bloody files into iCloud.

I have a need for an identical solution to the OP, so I am subscribing to this thread.

 

[Aghori]

dump it on an external disk thats encrypted with full-disk encryption with veracrypt or truecrypt, and courier it overnight.

 

[scoobs]

yeah i mean people over look these type of questions, I mean data is gold and if you working with top secret files then encryption and sharing can be your worst nightmare i guess

 

[scoobs]

you know what im scared about is that telegram is free open source so how do you really know how good is the encryption on it ?

in my head if its paid its good

 

[WAslayer]

have a look at amazon web services and s3 buckets.. you can store data in an s3 bucket which is encrypted, Server Side encryption or you can encrypt from the client side.. plus, any data you store there is pretty much guaranteed to never vanish unless you are being a total chop..

http://docs.aws.amazon.com/AmazonS3/latest/dev/UsingEncryption.html
http://s3browser.com/amazon-s3-server-side-encryption.aspx
https://aws.amazon.com/blogs/aws/new-amazon-s3-server-side-encryption/

 

[Messugga]

you know what im scared about is that telegram is free open source so how do you really know how good is the encryption on it ?

in my head if its paid its good

Why? I'd go over publicly published encryption algorithms over some secretive proprietary solution any day of the week.
If the algorithm is solid, it wouldn't matter that people knew how it worked.

 

[Randy_The_Squirrel]

you know what im scared about is that telegram is free open source so how do you really know how good is the encryption on it ?

in my head if its paid its good

Generally if its open source and I can have a look at the code, I am fine with it. If it's paid, doesn't mean the NSA hasn't put a backdoor in there.