MiscCrypto

Under Windows

CryptTool

• Demonstration and Reference Program for Cryptography + making AES executables
• freeware

AxCrypt

• AES-128 File Encryption, Compression and double-click Edit/View for secure document storage on Windows 95/98/ME/NT/2K/XP, locally or remote.
• GPL

Zip 2 Secure EXE

• AES-128/192/256 bits File Encryption, Create self-extracting EXE files from zip files
• freeware

Misc

To unlock password-protected pdfs

• PDF documents may have up to 2 passwords:
  • User password: protects read access to the document, and when no Owner password is specified, also protects permission settings.
  • Owner password: protects full access to the document, and protects permission settings (printing, copying...)

• Use pdftops to convert a protected PDF to Postscript, and possibly combine it with ps2pdf to obtain an unrestricted pdf. Knowing the Owner password is the easiest since that allows removing all restrictions. If not, it also works but in that case the permission allow Printing must be set. If it is not the case, then Owner password is necessary. Also if User password is set (ie. pdf reader asks for a password at open), then it must be provided (providing Owner password is also ok of course).

apt-get install gs-common xpdf-utils
pdftops <encrypted>.pdf <decrypted>.ps                              # Owner pwd set but unknown and 'allow printing' set
pdftops -upw <userpwd> <encrypted>.pdf <decrypted>.ps               # Same as above but user password also set
pdftops -opw <ownerpwd> <encrypted>.pdf <decrypted>.ps              # 'allow printing' not set -> owner pwd is necessary

pdftops -upw <password> <encrypted>.pdf -|ps2pdf - <decrypted>.pdf  # To generate a new PDF immediately

• An other solution is to use PDF Toolkit pdftk (apt-get install pdftk). However unlike pdftops this method doesn't work when only user password is known but both passwords are set.

pdftk <encrypted>.pdf input_pw <password> output <decrypted>.pdf

• pdftk can also be used to generate protected documents, and specifying permissions.

pdftk <unprotected>.pdf output <protected>.pdf allow Printing owner_pw <ownerpwd> user_pw <userpwd>    #Allow HQ printing

pwsafe

To use 'secure ram' (thereby locking the data in memory and preventing it being flushed to disk) you may like to run it setuid root:

$ sudo dpkg-statoverride --update --add --force root root 4755 /usr/bin/pwsafe