When comparing Email a Data & Filename encrypted .7z file (7-Zip) vs Email + PGP, the Slant community recommends Email + PGP for most people. In the question“What are the best ways to transmit sensitive information over the Internet?” Email + PGP is ranked 1st while Email a Data & Filename encrypted .7z file (7-Zip) is ranked 5th. The most important reason people chose Email + PGP is:
The original version of PGP is no longer freeware since it was aquired by Symantec, but the source code can still be [downloaded](http://www.symantec.com/connect/downloads/symantec-pgp-desktop-peer-review-source-code) for peer review.
Ranked in these QuestionsQuestion Ranking
Pros
Pro 7-Zip is free and open-source
One of the best programs to encrypt .zip files is a free and open source program called 7-Zip. Although there are many other options out there such as WinZip, many cost money.
Pro AES-256 encryption
7-Zip can encrypt files with extremely secure AES-256 encryption. AES is used by governments and businesses and is believed to be impossible to crack with today's technology at least. AES-256 has 1.1x10^77 combinations.
Pro Password protected
The encrypted file cannot be viewed without the same password inputted by the sender in the encryption process and the recipient in the decryption process. Although this password is another bit of sensitive information to transfer this may be a good solution if the sender and recipient can meet once for the password and then use password protected encrypted .7z files for future information transfers.
Pro Code available for audit
The original version of PGP is no longer freeware since it was aquired by Symantec, but the source code can still be downloaded for peer review.
Pro Many implementations available
PGP is a protocol and not an application per se. It offers a standard on which applications can implement to offer full encryption.
Pro No need to exchange private keys
PGP uses asymmetric encryption. One user generates 2 keys - private and public. Another user uses the public key to encrypt the message that can then be decrypted only using first users's private key.
Pro Can be integrated with multiple email clients
Cons
Con Encrypted .zips are suspicious
It is rather suspicious for an encrypted zip file to be found in your email. If it is seriously important, people can find a way to coerce you to give over the password. A steganography technique is important if secrecy is of utmost important.
Con Both the sender and recipient need an encryption program
Not only does the sender need an encryption program to encrypt the file, but the recipient needs an encryption program to open it.
Windows provides a basic level of encryption natively without AES, but most users craving security will want to use a more advanced utility with AES such as 7-Zip. If the recipient is not good with computers this may be difficult.
Con The standard encyption method ZipCrypto is unsecure
Be sure to select AES encryption instead of the standard and much less secure ZipCrypto encryption. And use .7z files with Filename encryption, to prevent anyone from even viewing the contents and filenames, instead of .zip files, which can only encrypt Data.
Con Zips are not made for this
Zips are there the compress and not to securely transmit
Con Can be daunting to set up
If your email client doesn't support PGP encryption, decrypting e-mails ca be dauting, especially if you want to stay away from command line.
Con Your contacts also need PGP
It's difficult to make all your contacts use PGP. Not everyone is 'privacy focused' and willing to learn/implement PGP.
Con less secure than Matrix
