PowerArchiver Encryption Suite (PAES)

Encrypt Files

Introduction

There are five secure encryption formats in PowerArchiver:

  • PA AES encryption - secure PA encryption, usable only with PowerArchiver. Most secure format in PowerArchiver!

  • PAE/PAE2 encryption - special encryption container format and can be used for all different archives supported in PowerArchiver. PAE2 is latest encryption format from PowerArchiver.

  • ZIP AES encryption - secure ZIP encryption, usable with newest versions of most popular zip utilities (recommended for compatibility).

  • 7-Zip AES encryption - AES encryption when you use 7-Zip format for compression.

  • OpenPGP Encryption – Full support for OpenPGP format. From encrypting/decrypting files to creating/importing/exporting OpenPGP keys.

Introduction to .PA encryption

PowerArchiver features Advanced Codec Pack (.PA format). It has the most secure encryption in PowerArchiver, and is more secure than ZIP and 7z AES. For added security, we use the BWTS algorithm to scramble the data before AES encryption, so attackers can not use LZ compression redundancy and other plaintext attacks to quickly check if given password is valid. This makes .pa format considerably more secure than ZIP AES. For the AES encryption module, we use FIPS 140-2 validated modules from Windows so you can rest assured that AES implementation has been tested and validated (FIPS 140-2 encryption module is always used). PA format is only used by PowerArchiver.

Using Encrypt tool

To start the tool, select “Encrypt ” from the “Tools ” menu/tab.

At the Encrypt dialog window, you will need to do several things:

  • Add Files - select the file/s that is/are going to be encrypted.

  • Add Folders - select the folder/s that is/are going to be encrypted. You can add one more more folders to the encryption tracklist.

  • Remove - Remove one, many or all files from encryption tracklist.

  • Encryption Options - Select format you want to to encrypt file/archive to.

  • ZIP Encryption Options - encrypt file/archive in ZIP format encryption including AES encryption. Encryption methods:

    • PK 2.04g - creates standard ZIP archives, with weak encryption but readable by all Zip utilities.

    • AES 128-bits - creates encrypted ZIP archives with AES 128-bit encryption, readable by newer Zip utilities (PowerArchiver 9.xx, PkZip 8.xx, WinZip 9.xx, etc).

    • AES 192-bits - creates encrypted ZIP archives with AES 192-bit encryption, readable by newer Zip utilities (PowerArchiver 9.xx, PkZip 8.xx, WinZip 9.xx, etc).

    • AES 256-bits - creates encrypted ZIP archives with AES 256-bit encryption, readable by newer Zip utilities (PowerArchiver 9.xx, PkZip 8.xx, WinZip 9.xx, etc).

  • 7-Zip - encrypt file/archive in 7-Zip AES 256-bits format.

    • Method - Choose between “Optimized”, “LZMA”, “LZMA2”, “PPMd” and “Store” methods of compression.

    • Compression - Choose the strength of compression of your encrypted archive.

    • Create Solid Archive - This option will let you create a Solid archive. All the files in the Solid archives are treated as one big file, which lets you achieve much better compression. Solid archives can not been updated or changed in normal usage. However, by using transparent 7-Zip updating support in PowerArchiver, you will be able to update solid 7-Zip archives as well.

  • PA - creates PA archives with AES 256-bit encryption (most secure).

    • Disabled - disables encryption for ZIP archives.

    • Secure AES 256-bits - creates PA archives with AES 256-bit encryption. For added security, we use the BWTS algorithm to scramble the data before AES, so attackers can not use LZ compression redundancy and other plaintext attacks to quickly check if given password is valid. This makes .pa format considerably more secure than ZIP AES. For the AES encryption module, we use FIPS 140-2 validated modules from Windows so you can rest assured that AES implementation has been tested and validated (FIPS 140-2 encryption module is always used).

    • Encrypt Filenames - encrypts file names inside archive so they can not be seen before correct password is used.

  • PAE/PAE2 - encrypt selected file/archive in PAE/PAE2 container with following Encryption Methods:

    • PAE/PAE2 has 5 different methods of encryption available with AES (default) being the most secure. We recommend using AES for encryption since it has been elected as a new Advanced Encryption Standard (AES).

  • Compression Options - select strength and method of compression (ZIP, PA and 7-Zip only).

  • Delete original file after encryption” - when checked, file that was encrypted (source file) will be deleted after encryption.

  • Encrypt filename - Encrypts the filename of encrypted file (PAE/PAE2, PA and 7-Zip only).

  • Group Into Single File - Groups all files/folders in tracklist into one encrypted archive.

  • Encrypt Individually - Encrypts all files/folders in tracklist into separate archives.

    • Append Suffix: - Adds a suffix to the filename of each encrypted archive. “_enc” is the default filename. To change it, place your cursor into the field and type in your own suffix.

  • Destination Folder

    • File's Current Folder - The encrypted archive or archives will be saved in the folder of the originating files that are being encrypted.

    • Custom Folder - Saves the encrypted archive or archives in the folder of your choice. To enter the custom folder to save to, either type in the folder location in the shown field or click the browse browse button to navigate to the desired folder of your choice.

After you have selected the options, click “Encrypt ” to finish the process and encrypt the file. PowerArchiver will then ask you for a password and you will have to enter it two (2) times.

Please note that it is very IMPORTANT that you do not forget your password. You will NOT be able to use the file if you forget the password. There is no way you can recover a forgotten PAE/PAE2 password.

PAE Encryption Tips and Tricks

  • PowerArchiver is able to intelligently handle archives inside of PAE files. If you open a PAE file that contains an archive such as “example.zip ”, PowerArchiver will transparently open the archive and let you handle it as if it were a normal zip file. If you change or update an archive, PowerArchiver will ask you if you want to update the encrypted (.pae) file as well. Please remember that if you answer with “NO ”, your changes will not be saved. You can also turn off transparent encrypted archive handling in “Options > Configuration> Misc.”.

  • PowerArchiver's Password Manager is able to remember passwords of encrypted files. This option is turned off by default but if you are working in secure environment and use PAE only to send files via the Internet, then you can enable it so you do not have to enter a password each time you want to access your encrypted files. You can do so in “Options > Configuration> Password Manager”. Your passwords are saved using 256 bit AES encryption.

  • You can create PAE files at the same time you create an archive in every format. Simply check “Encrypt archive after compressing ” in PowerArchiver's Add window, location under the Options tab. PowerArchiver will then load the encryption tool immediately after compression with predefined default options.

  • You can use Explorer Shell Extensions to encrypt files with one click of the mouse. To do this, you can either enable “Encrypt ” shell extensions under “Configuration > Shell Extensions” or simply use Compress with Options and check the “Encrypt Archive ” box.

Please Note:

PowerArchiver will be able to read and update files that were encrypted with any of these standards.

Decrypt Files

To Decrypt encrypted files, click the “Decrypt Files” button. A Decryption dialog will appear and you can use the following options to decrypt your encrypted achives;

  • Add Files - select the file/s that is/are going to be decrypted. Selected files will be added to the decryption tracklist.

  • Add Folders - select the folder/s that contain/s the encrypted files you wish to decrypt. The folders will be added to the decryption tracklist.

  • Destination Folder

    • File's Current Folder - The contents of the decrypted archive or archives will be saved in the folder of the originating file/s that are being decrypted.

    • Custom Folder - Saves the contents of the decrypted archive or archives in the folder of your choice. To enter the custom folder to decrypt to, either type in the folder location in the shown field or click the browse browse button to navigate to the desired folder of your choice.

  • Open Folder on Encrypting - Opens the destination folder of the decrypted contents of the decrypted file.

  • Overwrite Existing Files - Automaticall overwrites files located in the destination folder.

After selecting the desired decryption options click the Decrypt button and you will proceed to enter the password to decrypt the encrypted files in tracklist.

OpenPGP Key Manager

The OpenPGP Key Manager allows you to add, remove, revoke, export, sign and upload/download your OpenPGP keys to OpenPGP server.

To start the OpenPGP Key manager, start PowerArchiver 2013, go to the Options tab and click the “OpenPGP Keys” button.

Generate:

To generate an OpenPGP Key, click the Generate button and the Certification Creation Wizard will start. Use the following information to help you generate your key;

  • “Full Name:” - Enter the First and Last name for the key you wish to create

  • “Email:” - Enter the email address for the key you wish to create

  • “Type:” - Select the encryption type. RSA is the latest and most preferred.

  • “Key Size:” - Select the key size/strength. 2048bits is the default strength size.

  • “Expires:” - Select how long your key will be valid for. Choose “Never” and they key will never expire or click the dropdown arrow and select the expiration date of your key.

Click “Next” to move to the next screen where you will enter your OpenPGP key password.

  • “Enter Password:” - Enter the password for your OpenPGP Key

  • “Re-enter Password:” - Re-enter your OpenPGP key password

  • Please note that your Password Policies settings are displayed. Your password will have to fit those noted Password Policies. You can adjust your Password Policies in the Options>Configuration screen. * Please remember your password or keep it in a safe place, it cannot be recovered and any encrypted data you have using it, including emails, will be permanently inaccessible.

Once you enter your password, click Next and your OpenPGP key will be created. Click on “Finish” and you will be taken back to the OpanPGP Key Manager screen where your created key will appear in the key list.

Add Key(manually adding a key):

To manually add a key that is located on your hard drive/network location, click the “Add Key” button then browse the location of your key, select it and click the “Open” button. Next screen will show the key you have selected, click “OK” and the key you have selected will then be added to your key list.

Search on Server:

The Search on Server feature allows you to search the OpenPGP Keys database for the key you wish to add. To search for the key you wish to add, you can either enter the Name or email address of the key and click the “Search” button. Search results will then appear and you can select the key you wish to add and click the “Add” key. The selected key will then be added to your key list. To select multiple keys from your search results and add them, please hold down the CTRL key on your keyboard and select the keys you wish to add.

Remove Key:

To remove a key from your key list, select it and click the “Remove Key” button. You will be ask to confirm your key removal, click “Yes” to confirm the deletion or “No” to leave the key undeleted.

Export Key:

The OpenPGP Key manager allows you to export your public and secret keys in various ways. Click the Export Key dropdown and the following options will become available;

  • “Export Public Key” allows you to export and save your public key to a location on your hard drive/network. Select the key wish to export, click on Export Key then click the Export Public Key option, navigate to the location where you would like to save your key, name the key and click the Save button. Your key will then be saved to the selected location.

  • “Export Public key via e-Mail” allows you to export your OpenPGP key into a new email message using your default email client, with the key attached. Select the key you wish to export, click on Export Key then click the Export Public key via e-Mail button and your default email client will open a New email message window with the key attached to your new email message.

  • “Export Private(Secret) Key)” allows you to export your Private(Secret) key to a location on your hard drive/network. Select the Private(Secret) key you wish to export, click on Export Key then click the Export Public Key option, navigate to the location where you would like to save your key, name the key and click the Save button.

  • “Send Key to OpenPGP Server” allows you to upload your public key to the OpenPGP keyserver. Select the key you wish to upload, click on Export Key then Send Key to OpenPGP Server. You will receive a notice that your key has been successfully updated.

Sign:

Before you can use the other person’s public key to encrypt data or send emails to them, you have to sign their key with your key. To do this, double click the key you wish to sign, the dropdown will open with user information listed in the next row. Click the User Information for that key and click the Sign button. Choose the key you wish to sign and click OK. Enter the passphrase as requested and click OK again. Your key is now signed.

Revoke:

A revocation certificate is a special key that, when imported and merged with the key pair it was created for, will allow you to revoke (cancel) the key. You may need to do this in situations where the key has been compromised in some way, or you forgot your passphrase.

To Revoke a key, double click the key you wish to Revoke, click the User Information section in the next row, and click on Revoke. Then, you can select the key you wish to Revoke and click OK

Compiled from the official PowerArchiver Wiki (https://wiki.powerarchiver.com/)