|
|
Have you ever needed to enter a user/pass but didn't have it with you?
Do you carry your authentication credentials on a unprotected thumbdrive,
or worse, on a piece of paper in your pocket?
Would you like a simple way to encrypt some of the files you have?
If you answered yes to any of these, this application can help.
Many of us need anywhere/anytime access to our "private" data. More importantly
we need to ensure that the access and our data are secure. The goal of this
application is to deliver an easy and intuitive tool to provide secure
anywhere/anytime access to your data, allowing you to carry sensitive
information (account numbers, login credentials, etc.) on your thumbdrive
without worrying that your data will be compromised should the thumbdrive be lost.
In addition, this application can also encrypt any existing files you may have,
keeping them protected as well.
This application was designed to be installed to and and executed from a
thumbdrive; a thumbdrive that can be plugged in to any Java enabled computer.
As an enhancement, the application was then delivered via JNLP (Java Web Start)
to add a few additional features (desktop icon, control via the control panel,
etc.) that we have come to expect. Either way, this application will encrypt
your data, rendering it useless to anyone without the encryption key.
The encryption key protecting your data is kept a keystore,
with both the key and keystore being protected by a passphrase. Without that
passphrase, the key remains secured and your data cannot be decrypted. If you
use this application, a single passphrase can protect all your authentication
credentials and any other sensitive digital information you may have.
|
|
The goals of this software package are:
* Provide secure access to confidential data from any Java enabled device.
* Support the creation of encrypted text files.
* Ensure that the data in the files cannot be easily compromised.
* Provide a multi-window editor for encrypted text files.
* Have the application, a single JAR file, reside on a thumbdrive.
* Ability to plug your thumbdrive into *ANY* modern computer (especially a public computer) and use the application.
* Provide a fast, platform-independent encryption engine for all file formats.
|
|
* Get the Application *
You can get the application in a couple of different ways:
Note:
This application requires Java 6+.
JWS releases "should" prompt for the Java 6 download if needed.
1. Download the software without installing (for thumbdrives):
Zipped Release - Version 0.020.02
Zipped Release - Version 0.020.01
Zipped Release - Version 0.019.05
If you want to use this application on your thumbdrive, you'll need to download one of the
zipped formats from the list just above. Once downloaded, extract (unzip) the
executable JAR file and copy the JAR to your thumbrive. For additional details see the
README enclosed with the ZIP file.
2. Install and run a specific version from your desktop:
Java Web Start - Version 0.020.02
Java Web Start - Version 0.020.01
Java Web Start - Version 0.019.05
If you have Java Web Start (installed with Sun's Java) you can click on one
of the Java Web Start links just above and install the application to your PC.
Windows users will have the best experience as you will get a Desktop shortcut
and control via the Control Panel. Solaris and GNOME users seem to get the next
best set of features. Still need a report back from Mac users on this type of
install. If you don't have Java Web Start and do not want to install it either,
you can use the previous set of instructions for downloading a ZIP file.
3. Upgrade any installed version of PDS to the latest release:
Java Web Start - Version 0.020.02 - JnlpDownloadServlet
This is currently a work-in-progress, so be forewarned:
Am using Sun's JnlpDownloadServlet, which enhances the basic
Java Web Start by adding additonal features to the upgrading
installed releases. More about the features can be found here:
Download Servlet Guide
|
|
|
|
With this application there is no need to install software on every computer
you want to use; all the software is contained in a single JAR file.
A JAR file implies Java, which means that this application should
run on any machine with Java installed (again, Java 6+ is required).
|
|
|
This application provides a text editor that allows you to enter the
data (login information such as usernames or passphrases, account information, etc.)
and save it securely to your thumbdrive. The data can then be retrieved, but only
by using the passphrase (or passphrases, if you desire).
|
|
|
In addition to the text editor, this application also provides a fast encryption engine.
This engine can be used to encrypt your existing files, whether they are in Word, Excel, PDF
or any other format you have. They can be encrypted using the same key (and passphrase)
or a different key. You designate the key you wish to use.
|
|
|
As a part of the design, you can make your data protection as simple
(one passphrase for everything) or as complex (multiple keystore, multiple keys,
different passphrases for keystore and keys, etc.) as you like.
|
|
|
Clearly this application will not suit everyone. There could be some desired
functionality that is not currently provided for by this application. Or, you may find that
your needs could be more easily met using another application, one you might already
have. For example, simply encrypting files can easily be done with programs like 7-zip
or WinZip. A limitation of these programs however, is that they do not provide a
secure way to view or edit your files.
Instead, they rely upon other programs such as Vi or Notepad
that create "temporary" files on the filesystem. (These temporary files may exist
long after you have gone.) PDS provides a secure editor that does not create
temporary copies of your files on the filesystem. Additionally, PDS **scrubs passphrases
and data from memory** immediately after use.
|
|
If this solution doesn't fit your needs, some other quality options include:
Logio Secure Password Organizer
Password Manager
eWallet
RoboForm
1Password
KeePass
TrueCrypt
For more on this topic, see:
NPR's article
NPR's follow-on article
|
|
If you do try PDS, note that it receives most of its testing on Linux
and Windows; it has received limited testing on Solaris and the Mac.
Having a modern JRE (Java 1.6+) is the only known requirement.
This application is under development; new features are being added and
bug fixes are being incorporated.
|
|