If you have any data valuable enough to require encryption (as opposed to using the Windows XP user password at startup), then you should be hiring a data security expert as a consultant, rather than asking for advice from random amateurs like me.