Picocrypt NG

Name: Picocrypt NG — Download page. File encryption tool
Availability: InStock
Rating: 5 (1 reviews)
Author: Picocrypt NG

Picocrypt NG — Free Download. File encryption tool

Picocrypt NG is an open-source file encryption tool, a successor to the original Picocrypt project. Its design prioritizes cryptographic security and operational simplicity, allowing users to protect files and folders using modern algorithms. The program uses the XChaCha20 cipher and the Argon2id key derivation function to generate encrypted volumes. The application includes both a graphical interface and a command-line interface, covering different usage needs.

★★★★★

5.0(1 ratings)

Download Picocrypt NG (Official links)

File size: 2.62 MB

The latest version of Picocrypt NG is: 2.00

Operating system: Windows, Linux, MacOS

Languages: English

Developer: Picocrypt NG

Price: $0.00 USD

Secure Password Generator. Picocrypt NG incorporates a cryptographically secure password generator. It allows you to define the length and the types of characters included, providing robust keys to protect volumes. This generator uses a secure system entropy source, ensuring that the generated passwords are unpredictable and resistant to brute-force attacks.
Volume Comments. This feature allows you to attach non-sensitive descriptive text to an encrypted volume. This text is neither encrypted nor authenticated, so its purpose is purely informative. It is suitable for adding notes about the volume's content, making it easier to identify without needing to decrypt. Its use is recommended only in trusted environments where text modification is not a threat.
Keyfile Support. Supports the use of one or multiple files as an additional or sole authentication factor. A secure keyfile can be generated directly from the interface. The option to require a specific order for keyfiles adds an extra layer of security, useful in shared volume scenarios where multiple parties need to be present to decrypt.
Paranoid Mode. Activates an elevated security level through cascaded encryption using XChaCha20 and Serpent. It replaces BLAKE2b authentication with HMAC-SHA3 and increases Argon2 parameters. This mode is intended for protecting top-secret data, requiring an attacker to break two independent ciphers. The encryption and decryption process is slower due to the added computational complexity.
Reed-Solomon Error Correction Code. This feature adds error correction bytes to the encrypted volume. For every 128 bytes of data, 8 redundant bytes are added, allowing for information recovery if the file suffers partial corruption (up to approximately 3%). It is especially valuable for long-term file storage on media prone to degradation, such as external drives or cloud storage.
Force Decryption. Overrides the program's automatic integrity protections. Normally, Picocrypt NG verifies the volume's authenticity and aborts the output if tampering is detected. By enabling this option, the program will attempt to decrypt despite corruption, and if Reed-Solomon is active, it will try to recover as much data as possible from the damaged file.
Split into Chunks. Allows splitting the output volume into parts of customizable size (KiB, MiB, GiB, TiB). This functionality facilitates the management and transfer of large files through cloud services. To decrypt, simply drag one of the fragments onto the interface; the program will automatically recognize and reassemble all the parts.
File Compression. By default, multiple files are packaged without compression. When this option is activated, the Deflate compression algorithm is applied during the encryption process. This reduces the final size of the encrypted volume, optimizing storage space usage and bandwidth during transfers.
Plausible Deniability. Modifies the output format so that the encrypted volume is indistinguishable from a random stream of bytes. It removes the standard recognizable header, providing an obfuscation layer. This feature is intended for environments where the mere possession of encrypted files could be problematic. It disables certain security features of Paranoid Mode and requires manually renaming the output.
Recursive Processing. Allows encrypting or decrypting each file individually within a folder hierarchy. When dragging a folder with this option activated, the program processes each contained file separately, generating an independent encrypted volume for each one. This is practical for large document collections where selective access is needed without processing the entire set.
Command-Line Interface (CLI). Picocrypt NG offers a standalone CLI utility with full functionality. It supports encrypting and decrypting files, folders, and glob patterns, and includes advanced options like Paranoid Mode and Reed-Solomon. It is designed for systems without a graphical interface or for automation via scripts.
Limited Web Application. There is a web version with basic functionality, accessible from modern browsers, including mobile devices. This version only handles standard volumes (without advanced features or keyfiles) and has a file size limit of 512 MiB. Its goal is to provide a simple and future-proof access method for fundamental encryption operations.

Picocrypt NG is a community-developed continuation of the original Picocrypt project, which was archived. The developers of the original project do not endorse, develop, or provide support for Picocrypt NG. It is essential to use the "NG" suffix to distinguish this fork from the original software. The development of Picocrypt NG began after the archiving of the initial project, continuing its evolution. The program is written in the Go programming language, which contributes to its portability and efficiency.