SecureZIP for Windows

Create ZIP archives that are protected with strong 3DES or AES encryption. By compressing files before encrypting them, SecureZIP dramatically reduces cycle-intensive encryption processes, cutting the CPU and wall clock time needed to protect information.

SecureZIP encryption has been thoroughly tested and is proven to have the technical integrity required to meet regulatory requirements and current standards such as FIPS 197, the Advanced Encryption Standard (AES) specification.

Businesses often need to communicate securely between departments or with other organizations that may have different data security requirements. SecureZIP accommodates those who have PKI and those who don't by enabling encryption and decryption via passphrases, public key/private key pairs, or both at the same time, depending on the access requirements of each intended recipient. Recipients can then decrypt files by presenting the correct passphrase or private key.

SecureZIP supports X.509 v3 certificates issued from recognized certificate authorities such as VeriSign®, Entrust®, and Microsoft®

SecureZIP enables users to sign files with their unique digital certificates. Recipients of signed files can validate the signature to ensure the sender is who he or she claims to be, and verify that the document has not been altered or tampered with since it was signed. In addition, digital signatures offer non-repudiation - in other words, the signer cannot later claim that the signature is not valid. Digital signatures are useful for enforcing accountability as required by regulations such as Sarbanes-Oxley.

SecureZIP archives are portable file containers suitable for major enterprise operating systems - from end-user desktops to IBM mainframes. SecureZIP cross-platform file transfer is pain-free, enabling persistent security throughout the entire organization.

SecureZIP incorporates the RSA BSAFE cryptographic libraries, the most widely used e-security technology in the world, to deliver industry-proven file protection.

SecureZIP makes data protection incredibly easy for end-users. Signing and encrypting files are single click operations to ensure rapid adoption of good security practices by end-users - with minimal training and help-desk support.

File name encryption masks file name, file size, and other information to further protect data if it is intercepted in transit or improperly accessed. Only SecureZIP provides file name encryption, overcoming vulnerabilities identified by leading cryptography experts in other ZIP data protection solutions.

SecureZIP's support for smart cards and smart tokens enables security professionals to apply an added layer of data protection by storing the user's private decryption key or strong password on a small portable device. For example, if a user's laptop is lost or stolen, there will not be a risk of data being compromised since the credentials for decrypting the data reside somewhere other than on the laptop.

Smart cards and smart tokens also enable two-factor authentication, requiring the user to present two credentials before he can access protected data - something he knows, such as a password, and something he has, such as a private key stored on a portable device.

Files that have been deleted can often leave behind traces that can be pieced together by a hacker. SecureZIP can be configured to overwrite deleted files on PC hard drives - even up to seven times in accordance with NSA specifications - to ensure deleted information cannot later be recovered.

While most encryption solutions make files larger, SecureZIP includes PKZIP's powerful compression algorithms to reduce file size by as much as 95 percent - dramatically reducing DASD, tape, and bandwidth consumption.

Unlike other vendors who offer support only through email or online forums, PKWARE's experienced technical support staff offers live telephone support in addition to web and email support should any concerns ever arise.

Good passphrases are essential to maintaining the security of your data - the longer the passphrase, the more secure it is. PKZIP allows administrators to configure the minimum length of passphrases created by users.

SecureZIP can check the validity of digital certificates used for digital signing or encryption against a Certificate Revocation List (CRL). CRL checking will indicate if a certificate is invalid both when users encrypt and sign archives, or decrypt archives and view signatures.

SecureZIP's Policy Manager was designed specifically for the enterprise. Security professionals can control encryption, digital signature, and other security policies for email attachments based on individual users or workgroups. Corporate policies for protecting intellectual property can be implemented from one central location without relying solely on user discretion

SecureZIP offers an optional interface that integrates with Lightweight Directory Access Protocol (LDAP) compliant directories, such as Sun® iPlanet, Novell NetWare®, and Microsoft Active Directory®. LDAP integration makes it easy to locate, retrieve, and apply the public keys for certificate-based encryption