Posted 12 October 2010 - 05:11 AM
I recommend you encrypt the files and not the CD.
Put all your files in a ZIP container and encrypt it with AES (that's an encryption option of your compression utility).
The names of your files will still be visible when someone opens the ZIP file, but the content not. The password is needed to view the content.
So don't put confidential information in the filename.
7-zip is a free compression utility with support for the ZIP format and AES encryption.
The advantage of using the ZIP format is that it is widely used, and that the users of your CD might already have an application that supports encrypted ZIP (like WinZIP).
The remaining problem is key management: how to you get the encryption key securely to your users, and changing keys.
SANS ISC Senior Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2019
If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.
Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"