AxCrypt2Go & AxDecrypt

Submit portable freeware that you find here. It helps if you include information like description, extraction instruction, Unicode support, whether it writes to the registry, and so on.
Message
Author
User avatar
I am Baas
Posts: 4150
Joined: Thu Aug 07, 2008 4:51 am

AxCrypt2Go & AxDecrypt

#1 Post by I am Baas »

AxCrypt2Go.exe is an install-free simple program allowing you to encrypt and decrypt on the road. The full version is still recommended for day-to-day use.

AxDecrypt.exe is an install-free, decrypt-only "viewer". If you just have a .axx-file and a passphrase, this is for you, but not AxCrypt installed.
Available in 32- or 64-bit

http://www.axantum.com/AxCrypt/Downloads.aspx

User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: AxCrypt2Go & AxDecrypt

#2 Post by webfork »

Excellent news: AxCrypt has been around forever and I know a lot of people use it for security. Good to finally see a portable version.

User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: AxCrypt2Go & AxDecrypt

#3 Post by webfork »

Lots of things to like:
  • Built from a very mature program (I recall it was one of my first exposures to security freeware 10+ yrs ago)
  • Open source (GPL)
  • Uses standard AES-128 encryption
  • Supports key files (assuming no one finds your key file, can be orders of magnitude more secure than a password)
  • Intelligent compression (won't compress something that doesn't need it)
However, I'm not seeing why someone would use this over 7-zip, which has better compression (AxCrypt uses ZIP compression via zlib) and lots of features.

---

AxCrypt2Go
  • Looks portable -- in fact there are NO settings are available to change, and this looks stealth (I had some weird system crap running at the same time so I'm not 100% sure).
Wishlist:
  • Support drag-and-drop. Maybe like our Drag-n-Crypt Ultra with that little floating box.
  • Inside the file manager, double-click an AXX file (the encrypted file) to decrypt it (right now you've got to right-click it)
  • Fix the odd desktop behavior: you can see folders on the desktop, but not the desktop itself. Refresh doesn't work to make folders you create on the desktop appear
  • Intelligent LZMA compression (or just use 7-zip libraries)
  • Other included security tools like a wipe program or something
  • Text output option
AxDecrypt
  • Will cache the passphrase for other files.
Wishlist: I actually like the simplicity, but I want it to support drag and drop.

---

Side note: interesting bit for security nerds: PC Mag points out AES 128 is oddly better than 256.
Last edited by webfork on Sun Jan 29, 2012 11:32 am, edited 3 times in total.
Reason: (edit for formatting and cut a repeat statement)

User avatar
Midas
Posts: 6710
Joined: Mon Dec 07, 2009 7:09 am
Location: Sol3

Re: AxCrypt2Go & AxDecrypt

#4 Post by Midas »

(Not an update:) AxCrypt is being proposed as a TrueCrypt alternative (http://www.portablefreeware.com/forums/ ... .php?t=659); latest version is v1.7.2867 (released 2011-12-04; changelog at http://sourceforge.net/projects/axcrypt ... /1.7.2867/ -- requires download).

Anyone contemplating AxCrypt portable use should read "AxCrypt Command Line" (especially "-u", see http://www.axantum.com/AxCrypt/CmdLine.html), and "Registry keys and values" (http://www.axantum.com/AxCrypt/Registry.html)...
AxCrypt2Go is v0.0a0.1 (released 2006-02-26, see http://sourceforge.net/projects/axcrypt ... xCrypt2Go/).

AxDecrypt is v1.6.4.4 (released 2008-05-15, see http://sourceforge.net/projects/axcrypt ... AxDecrypt/).

User avatar
Craunch
Posts: 54
Joined: Tue Jul 03, 2012 5:27 am
Location: UK

Re: AxCrypt2Go & AxDecrypt

#5 Post by Craunch »

That inclusion of OpenCandy means that I will probably never use AxCrypt2Go.

I regard all online advertising as a potential source of malware and do whatever I can to avoid it. The dubious decision to include OpenCandy means that I could now only trust this software if I built it myself from source having given its source a thorough code review to satisfy myself that there is nothing else of a dubious nature tucked away. That isn't worth it - there are other programs around that are not tainted by advertising in any way.

User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: AxCrypt2Go & AxDecrypt

#6 Post by webfork »

Craunch wrote:I regard all online advertising as a potential source of malware and do whatever I can to avoid it.
I definitely sympathize but I don't follow your logic: an adware offer doesn't necessarily mean that the program's security is compromised. Additionally, it would seem to make more sense to trust a program more that has a clear financial model, rather than wonder if someone is funding them while maintaining a backdoor. That's the primary fear with Microsoft's Bitlocker encryption, since the US Govt is a huge customer.

Now, if the program does the stealth or "drive by" adware install, that's definitely a security concern.

Anyway, here's the author's breakdown on the adware move:
http://www.axantum.com/axcrypt/freeware.html

romulous
Posts: 76
Joined: Fri Feb 25, 2011 5:51 pm

Re: AxCrypt2Go & AxDecrypt

#7 Post by romulous »

Midas wrote:latest version is v1.7.2867 (released 2011-12-04
Incorrect. That is just the latest version released to Sourceforge - the current version is only hosted on the Axantum website. As per the downloads page in the first post, the current download is actually 1.7.3156 (v2 is in Beta, but you have to sign up on the Axantum website to get access to it).

I'm unsure if you have the current versions of AxCrypt2Go and AxDecrypt either - the current download links are not to Sourceforge, but again, direct from the Axantum website. The website does not actually state what the version is for either of those programs.

User avatar
Craunch
Posts: 54
Joined: Tue Jul 03, 2012 5:27 am
Location: UK

Re: AxCrypt2Go & AxDecrypt

#8 Post by Craunch »

webfork wrote:an adware offer doesn't necessarily mean that the program's security is compromised
I agree, but equally it doesn't necessarily mean that the program's security is uncompromised either. I regard it as a warning flag.

the main problem I have with such adware offers as OpenCandy, or various toolbars is that they are usually opt-out if you don't want them instead of opt-in if you really want them. All it takes is one slightly hasty click and you've got that crap on your computer. I've been caught by this before, by the Ask Toolbar from Oracle Java if I remember correctly.

So far as he author's breakdown on the adware move is concerned, it looks to me like a case of "monkey see, monkey do". Nevertheless, my use of AxCrypt2Go & AxDecrypt remains highly unlikely.

User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: AxCrypt2Go & AxDecrypt

#9 Post by webfork »

Craunch wrote:Nevertheless, my use of AxCrypt2Go & AxDecrypt remains highly unlikely.
Yeah if you saw my review above, I don't really have much reason to use it. Standard 7zip seems much better.
Craunch wrote:All it takes is one slightly hasty click and you've got that crap on your computer. I've been caught by this before, by the Ask Toolbar from Oracle Java if I remember correctly.
Point taken. I can't help but think that's sort of the whole point, and that's why they don't make it opt-in rather than opt-out.

Incidentally, if anyone ends up with that OpenCandy crap, Ghacks highlighted a removal method that will probably help. A poster there claims that you can launch the executable with /nocandy argument but even that seems tedious to me and I use launch arguments all the time.

User avatar
loin2kolpotoru
Posts: 279
Joined: Fri Oct 09, 2009 11:20 am

Re: AxCrypt2Go & AxDecrypt

#10 Post by loin2kolpotoru »

Although the program needs much improvement as mentioned by webfork in his Wishlist, but I support the author's adware move because the author has to make money for living in someway or the other.

There are many software authors who initially release their software
as opensource/freeware but later make them trial version or lock their important function for a pro version this dose great loss to the opensource/freeware community.

But as in the case of AxCrypt we have many options to avid the adware without losing a good opensource software -
1. Use the portable adfree version.
2. Then we can use the /NOCANDY commandline parameter to avid adware.
3. Or Simply decline the offer when and if it is made using the 'Cancel' button.
4. Finally if someone is too much concerned with security then he can first install inside a virtualmachine or sandbox then if he is satisfied with security then install in real machine.
5. And if you are a programmer then AxCrypt is Opensource program you can verify its security in the source code and compile a adfree version yourself.

User avatar
Midas
Posts: 6710
Joined: Mon Dec 07, 2009 7:09 am
Location: Sol3

Re: AxCrypt2Go & AxDecrypt

#11 Post by Midas »

loin2kolpotoru wrote:5. And if you are a programmer then AxCrypt is Opensource program you can verify its security in the source code and compile a adfree version yourself.
  • That's what the F-Droid (http://f-droid.org/) project is trying to do for OSS Android apps -- I wish their example would spill over to Windowsland... :roll:
    [url]http://f-droid.org/[/url] author wrote:F-Droid is an installable catalogue of Free and Open Source Software applications for the Android platform. The client makes it easy to browse, install, and keep track of updates on your device.

User avatar
I am Baas
Posts: 4150
Joined: Thu Aug 07, 2008 4:51 am

Re: AxCrypt2Go & AxDecrypt

#12 Post by I am Baas »

romulous wrote:
Midas wrote:latest version is v1.7.2867 (released 2011-12-04
Incorrect. That is just the latest version released to Sourceforge - the current version is only hosted on the Axantum website. As per the downloads page in the first post, the current download is actually 1.7.3156 (v2 is in Beta, but you have to sign up on the Axantum website to get access to it).

I'm unsure if you have the current versions of AxCrypt2Go and AxDecrypt either - the current download links are not to Sourceforge, but again, direct from the Axantum website. The website does not actually state what the version is for either of those programs.
1.7.3156.0 Released 2014-01-16

User avatar
smaragdus
Posts: 2120
Joined: Sat Jun 22, 2013 3:24 am
Location: Aeaea

Re: AxCrypt2Go & AxDecrypt

#13 Post by smaragdus »

Hello,

I have a question about AxCrypt. Version 1.7.3156.0 offered to install Opera and besides this it is showing ads while running- please see the screen-shot below:
AxCrypt - 002 - 2015-08-14.png
AxCrypt - 002 - 2015-08-14.png (13.01 KiB) Viewed 60153 times
Does anyone know whether these ads can be avoided?

Enternal
Posts: 89
Joined: Thu Jan 02, 2014 3:41 pm

Re: AxCrypt2Go & AxDecrypt

#14 Post by Enternal »

No that cannot be disabled. It's an advertisement for the author's own online Password Manager so don't worry too much about it.

User avatar
smaragdus
Posts: 2120
Joined: Sat Jun 22, 2013 3:24 am
Location: Aeaea

Re: AxCrypt2Go & AxDecrypt

#15 Post by smaragdus »

@Enternal
Thank you for your response.
I tested all previous versions of AxCrypt at SourceForge- AxCrypt 1.6.4.4 is only x32 bit so it doesn't run on x64 systems therefore I don't know whether it shows ads or not. But all other versions (1.7.2126.0, 1.7.2614.0, 1.7.2687.0, 1.7.2867.0, 1.7.3156.0) are ads-ridden so I uninstalled AxCrypt for good. From version 1.7.2867.0 the rogue developer discarded the MSI installer because he could not inject OpenCandy into it.

AxCrypt2Go is clean but barely useful.

My software principle #1- zero tolerance to adware.

Post Reply