CUMC Home | Columbia University | Jobs at CUMC | Contact CUMC | Find People
     
Columbia University Medical Center logo,  Columbia University Medical Center Information Technology
 
 
For support: call extension 5-Help (212-305-4357), email us, or instantly connect to a technician with CUMC IT eSupport

 
  HIPAA Policies
 CUMC's Main HIPAA Site
 Email Policies (113K) pdf icon
 HIPAA Security Project at CUMC
 NY State HIPAA Guidelines (116K) pdf icon
 DHHS Guidance for Data Use (161K) pdf icon
  Announcements
 Announcements Home
  Resources
 Software
 Hardware
 HIPAA
 Biomedical Devices
 CUMC Applications and Password Change Information
 NYP Password Change Instructions
 Incidents
 CUMC Firewall Exception Request Forms
 Claim a Blocked Host
  Training
 HIPAA Online
 Schedule In Person Training
 Archived Systems Administrator Meetings
  Interesting Articles
 Identity Theft - Oklahoma Police Department
 Stanford's Draft Research Policy (3/3/203) (242K) pdf icon
 Rudimentary Treatise on the Construction of Locks (excerpt) - by Charles Tomlinson in 1853.
 Privacy Rights Clearinghouse - Chronology of Data Breaches
 

Security - Folder, Disk and USB Encryption Recommendations

To download a printable, PDF copy of this information please click here.

Folder and Disk Encryption
  • WinZip
    • Website: http://www.winzip.com
    • Use: File and Folder Compression software
    • Current Version: 12.1
    • Cost: Commercial
    • Encryption: Standard Zip 2.0 and AES-128 & 256 bit
      Do not rely on Zip 2.0 encryption to provide strong data security
      WinZip's implementation of the AES algorithm has been FIPS-197 certified by NIST.
    • Password: Yes. Files can be password protected
    • Usage: WinZip provides two alternatives for encrypting files.

      The most efficient way to encrypt files is to do so while you are adding them to a Zip file (.zip or .zipx).To encrypt files while they are being added simply check the Encrypt added files check box in the Add dialog. Before adding the files, WinZip will display the Encrypt dialog, where you will specify the password and Encryption method. When you add files to a Zip file from Windows Explorer, you will have an option to encrypt the files if the Add dialog is displayed.

      Note: In some cases, however (e.g., when you choose Add to recently used Zip file), there is no Add dialog and therefore no opportunity to encrypt the files while they are being added. In these cases, you can encrypt files after they have been added.

      To encrypt files already in a Zip file:
      1. Open the Zip file in the Classic interface
      2. Click Encrypt on the Actions menu
      OR
      1. Right click on the Zip file in My Computer, Windows Explorer, or Computer (in Vista)
      2. Select WinZip
      3. Select Encrypt
      In either case, WinZip will ask for a password and encryption method and then encrypt all files currently in the Zip file.

      If a file in the Zip file is already encrypted, it will first be decrypted and then re-encrypted using the password and encryption method you specified. WinZip will first try to decrypt the file using the current password; if the file cannot be decrypted with this password, WinZip will ask you for the correct password. If you are unable to supply the correct password, the file can be skipped, and it will remain unchanged in the Zip file. The password you entered in the Encrypt dialog box will remain active until either you delete or replace it, or you close the archive.
  • 7-ZIP
    • Website: http://www.7-zip.org/
    • Use: File and Folder Compression software
    • Current Version: 4.65
    • Cost: Free
    • Encryption: AES-256 encryption in 7z and ZIP formats
    • Password: Yes. Files can be password protected
    • Usage: As default 7-Zip installs itself to with “explorer extensions” that allow you to right click on items on the desktop or in windows explorer to compress files.
      1. Right click on the files or folder you wish to compress and encrypt. Select ‘Add to Archive…’
      2. Change the Archive format to Zip (or use 7z if both you and your intended recipient use 7zip), then change the encryption method to AES-256, enter your password. Then click OK. The rest of the options can be left as default.
  • Truecrypt
    • Website: http://www.truecrypt.org/
    • Use: Disk encryption software for Windows Vista/XP, Mac OS X, Linux
    • Current Version: 6.2a
    • Cost: Free/Open Source
    • Encryption: AES-256, Serpent, Twofish
    • Password: Yes, required to decrypt partitions/volumes
    • Usage: Please see website documentation
  • Microsoft Encrypting File System
    • Website: http://www.microsoft.com
    • Use: File Encryption as part of Windows XP and later Operating Systems
    • Current Version: n/a
    • Cost: Included in OS.
    • Encryption: 3DES, AES-256 (default) , RSA Certificates, ECC
    • Password: Yes
    • Usage: Please see website documentation
  • FileVault
    • Website: http://www.apple.com
    • Use: Home Directory Encryption on Apple OS X V10.3 and later.
    • Current Version: n/a
    • Cost: Included in OS.
    • Encryption: AES
    • Password: Key derived from user’s login password.
    • Usage: Please see website documentation
Encrypted USB Drives
  • IronKey and Kingston DataTraveler Vault
    • Website: https://www.ironkey.com and http://www.kingston.com
    • Use: USB Data Storage
    • Current Version: Ironkey Basic S200 and Kingston DataTraveler Vault
    • Cost: Varies
    • Encryption:
      • IronKey - AES 256 hardware-based encryption - FIPS 140-2 Standard Level 3 Validated. (recommended)
      • DataTraveler BlackBox – AES 256 bit hardware-based encryption, FIPS 140-2 Level 2 certified. (recommended)
      • DataTraveler Vault - Privacy Edition - AES 256 bit hardware-based encryption – TAA Compliant.
      • DataTraveler Vault – AES 256 bit hardware-based encryption and file access protection – TAA Compliant.
    • Password: Required for encryption/decryption
    • Usage: Please see website documentation
Additional Resources

| TOP |

Last updated 11/10/2009

 
 
 
 
bullet Home                bullet Getting Started                bullet Getting Help                bullet Email                bullet Quick Links                bullet About CUMC IT
CUMC Home | © Columbia University | Affiliated with New York-Presbyterian Hospital | Comments | Text-Only Version