A really secure file encryption solution

[HikariWS]

I, as many others, used TrueCrypt. It's not a good solution anymore because all encrypted files are stored in a single volume file.

The problem is that, when creating the volume, we must already define its size. While few storage is being used on it, a lot is wasted on main HD. And when we fill the volume, it's not easy to increase its size. Also, when we wanna encrypt files before sending them to cloud storage, TrueCrypt's volume isn't WebDAV friendly.

Because of those issues I started using BoxCryptor, its advantage is that it encrypts each file separately, this avoids the need of creating a big volume file and allows its use with WebDAV sharing services.

But BoxCryptor is gone. It was changed for a "server-side encrypting" solution, as many services out there. I can't accept a service like that is secure, all of them claim to be able to share "encrypted" files without requiring my private key. So, if there is a way to decrypt files without my key, then the least thing these services are is secure.

I tried now Cryptomator, it's a new FOSS solution that works similar to how BoxCryptor used to work, adding the feature of encrypting folders and files names. It seemed awesome, the best of TrueCrypt and BoxCryptor together! But it's VERY slow, to the point of hanging any process that tries even to list the contents of a folder inside its vault. Cryptomator will be great in some years, but it's too slow for now.

Can somebody suggest me any solution, that's really secure and doesn't just claim to be, that works offline and doesn't require sending files to a remote server, that doesn't share anything that only I should be able to decrypt, and doesn't require big volume files?

[Guest10]

You might read here about AxCrypt. It only encrypts files though, not folders.
It adds itself as a right-click context menu in Windows Explorer.
http://www.axantum.com/axcrypt/Downloads.html

If you decide to install the program...
To keep from seeing any offers to install additional software, due to the OpenCandy plug-in that's in the installer program:
Create a shortcut to the .exe file that you downloaded.
In that shortcut's Target box, add a <space> and then /nocandy to the end of the line:
"C:\Downloads\AxCrypt-1.7.3156.0-Setup.exe" /nocandy
Use that shortcut to install the AxCrypt program.

Personally, although I have AxCrypt installed, I generally use my OpenPgp software to encrypt/decrypt sensitive items that are stored in my Dropbox folders. I use the same key to encrypt/decrypt emails, in Thunderbird with the Enigmail add-on. These would be items that only I can decrypt, unless I also encrypt them to another person's key in addition to my own key.
With AxCrypt you could just give someone else the decrypt password, if they don't use OpenPgp.

[HikariWS]

Thanks for the tip. AxCrypt is a bit close to what I look, but it's too manual and troubling that makes it not worth the trouble.

I'd need to encrypt each file separately... and when decrypting what it does (seems to do) is just decrypt the file, execute it and keep track of changes to encrypt back. It's good for needs like yours, to quickly encrypt a file, with possibility of self-decrypting, and possibly send it to somebody else.

BoxCryptor and Cryptomator are aimed to self use, not to send encrypted files to somebody else. They are on driver level and create a virtual drive and any software handles its files naturally as any other, this avoids a lot of issues that AxCrypt may face.

I'll keep looking

[HikariWS]

I was reading Cryptomator's support forum and found ppl talking about other solutions!

There's eCryptFS, GoCryptFS, and my chosen one EncFS!

Surprisingly, BoxCryptor was all this time using EncFS as its backend! They took a FOSS and stripped its features (encrypt file names) and released as their own.

Gonna do some tests before the move, but it's being used for at least 5 years and it seems all its issues are now fixed.

[sanbox man]

I was reading Cryptomator's support forum and found ppl talking about other solutions!

There's eCryptFS, GoCryptFS, and my chosen one EncFS!

Surprisingly, BoxCryptor was all this time using EncFS as its backend! They took a FOSS and stripped its features (encrypt file names) and released as their own.

Gonna do some tests before the move, but it's being used for at least 5 years and it seems all its issues are now fixed.

So hows EncFS so far for you? My requirements are similar to yours.