Comparison of disk encryption software
From Wikipedia, the free encyclopedia
Page Module:Message box/ambox.css has no content.
This article may contain original research. (April 2026) |
Page Module:Message box/ambox.css has no content.
This article or section possibly contains original synthesis. Source material should verifiably mention and relate to the main topic. (April 2026) |
This is a technical feature comparison of different disk encryption software.
Background information
| Name | Developer | First released | Licensing | Maintained? |
|---|---|---|---|---|
| Aloaha Crypt Disk | Aloaha | 2008 | Source Auditable for Commercial Customers | Yes |
| ArchiCrypt Live | Softwaredevelopment Remus ArchiCrypt | 1998 | Proprietary | Yes |
| BestCrypt | Jetico | 1993[1] | Proprietary | Yes |
| BitArmor DataControl | BitArmor Systems Inc. | 2008-05 | Proprietary | Yes |
| BitLocker | Microsoft | 2006 | Proprietary | Yes |
| Bloombase StoreSafe | Bloombase | 2012 | Proprietary | No[2] |
| Boxcryptor | Secomba GmbH | 2011 | Proprietary | No |
| CGD | Roland C. Dowdeswell | 2002-10-04[3] | BSD | Yes |
| CenterTools DriveLock | CenterTools | 2008 | Proprietary | Yes |
| Check Point Full Disk Encryption | Check Point Software Technologies Ltd | 1999[4][5][6] | Proprietary | Yes |
| CipherShed | CipherShed Project | 2014[7] | TrueCrypt License Version 3.0[8] | No |
| CrossCrypt | Steven Scherrer | 2004-02-10[9] | GPL | No |
| CryFS | Sebastian Messmer | 2015 | LGPLv3 | Yes |
| Cryhod | Prim'X Technologies | 2010 | Proprietary | Yes |
| Cryptainer | Cypherix Software | 1998 | Proprietary | Yes |
| Cryptic Disk | Exlade | 2003 | Proprietary | Yes |
| CryptArchiver | WinEncrypt | ? | Proprietary | Yes |
| Cryptoloop | ? | 2003-07-02[10] | GPL | No |
| Cryptomator | Skymatic UG (limited liability) | 2016-03-09[11] | GPLv3 | Yes |
| CryptoPro Secure Disk Enterprise | cpsd it-services GmbH | 2010 | Proprietary | Yes |
| CryptoPro Secure Disk for BitLocker | cpsd it-services GmbH | 2012 | Proprietary | Yes |
| CryptSync | Stefan Küng | 2012 | GPL v2 | Yes |
| Discryptor | Cosect Ltd. | 2008 | Proprietary | No |
| DiskCryptor | ntldr, David Xanatos | 2007 | GPL | Yes[12] |
| DISK Protect | Becrypt Ltd | 2001 | Proprietary | Yes |
| Cryptsetup / Dmsetup | Christophe Saout | 2004-03-11[13] | GPL | Yes |
| Dm-crypt / LUKS | Clemens Fruhwirth (LUKS) | 2005-02-05[14] | GPL | Yes |
| DriveSentry GoAnywhere 2 | DriveSentry | 2008 | Proprietary | No |
| E4M | Paul Le Roux | 1998-12-18[15] | Open source | No |
| e-Capsule Private Safe | EISST Ltd. | 2005 | Proprietary | Yes |
| eCryptfs | Dustin Kirkland, Tyler Hicks, (formerly Mike Halcrow) | 2005[16] | GPL | Yes |
| EgoSecure HDD Encryption | EgoSecure GmbH | 2006 | Proprietary | Yes |
| EncFS | Valient Gough | 2003[17] | LGPLv3 | No |
| EncryptStick | ENC Security Systems | 2009 | Proprietary | Yes |
| FileVault | Apple Inc. | 2003-10-24 | Proprietary | Yes |
| FileVault 2 | Apple Inc. | 2011-07-20 | Proprietary | Yes |
| FREE CompuSec | CE-Infosys | 2002 | Proprietary | Yes |
| FreeOTFE | Sarah Dean | 2004-10-10[18] | Open source | No |
| GBDE | Poul-Henning Kamp | 2002-10-19[19] | BSD | No |
| GELI | Pawel Jakub Dawidek | 2005-04-11[20] | BSD | Yes |
| GnuPG | Werner Koch | 1999-09-07[21] | GPL | Yes |
| gocryptfs | Jakob Unterwurzacher | 2015-10-07[22] | MIT / X Consortium License | Yes |
| Knox | AgileBits | 2010 | Proprietary | Yes |
| KryptOS | The MorphOS Development Team | 2010 | Proprietary | Yes |
| LibreCrypt | tdk | 2014-06-19[23] | Open source | No |
| Loop-AES | Jari Ruusu | 2001-04-11 | GPL | Yes |
| McAfee Drive Encryption (SafeBoot) | McAfee, LLC | 2007[24] | Proprietary | Yes |
| n-Crypt Pro | n-Trance Security Ltd | 2005 | Proprietary | Yes |
| PGPDisk | PGP Corporation (acquired by Symantec in 2010) | 1998-09-01[25] | Proprietary | Yes |
| Private Disk | Dekart | 1993[26] | Proprietary | Yes |
| ProxyCrypt | v77 | 2013 | Open source | Yes |
| R-Crypto | R-Tools Technology Inc | 2008 | Proprietary | Yes |
| SafeGuard Easy | Sophos (Utimaco) | 1993[27] | Proprietary | Yes |
| SafeGuard Enterprise | Sophos (Utimaco) | 2007[28] | Proprietary | Yes |
| SafeGuard PrivateDisk | Sophos (Utimaco)[29] | 2000 | Proprietary | Yes |
| SafeHouse Professional | PC Dynamics, Inc. | 1992 | Proprietary | Yes |
| Scramdisk | Shaun Hollingworth | 1997-07-01 | Open source | No |
| Scramdisk 4 Linux | Hans-Ulrich Juettner | 2005-08-06[30] | GPL | No |
| SecuBox | Aiko Solutions | 2007-02-19 | Proprietary | Yes |
| SECUDE Secure Notebook | SECUDE | 2003 | Proprietary | Yes |
| Seqrite Encryption Manager | Quick Heal Technologies Ltd. | 2017 | Proprietary | Yes |
| Sentry 2020 | SoftWinter | 1998[31] | Proprietary | No |
| Softraid / RAID C | OpenBSD | 2007-11-01[32] | BSD | Yes |
| SpyProof! | Information Security Corp. | 2002 | Proprietary | Yes |
| Svnd / Vnconfig | OpenBSD | 2000-12-01[33] | BSD | Yes |
| Symantec Endpoint Encryption | Symantec Corporation | 2008 | Proprietary | Yes |
| Tcplay | Alex Hornung | 2012-01-28[34] | BSD | No[35] |
| Trend Micro Endpoint Encryption (Mobile Armor) | Trend Micro[36] | 2004 or earlier[37] | Proprietary | Yes |
| TrueCrypt | TrueCrypt Foundation | 2004-02-02[38] | TrueCrypt License 3.1[39] | No |
| USBCrypt | WinAbility Software Corp. | 2010 | Proprietary | Yes |
| VeraCrypt | IDRIX | 2013-06-22[40] | Apache License 2.0[41]
TrueCrypt License Version 3.0 (legacy code only) |
Yes |
| CyberSafe Top Secret | CyberSoft | 2013 | Proprietary | Yes |
| Name | Developer | First released | Licensing | Maintained? |
Operating systems
| Name | Android | Windows NT | iOS | Mac OS X | Linux | FreeBSD | OpenBSD | NetBSD |
|---|---|---|---|---|---|---|---|---|
| Template:Rh| Aloaha Crypt Disk | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| BestCrypt Volume Encryption | ? | Yes | ? | Yes | No[42] | No | No | No |
| Template:Rh| BitArmor DataControl | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| BitLocker | No | Yes | ? | Partial[43] | Partial[43] | No | No | No |
| Template:Rh| Bloombase StoreSafe | ? | Yes | ? | Yes | Yes | Yes | Yes | Yes |
| Template:Rh| Boxcryptor | Yes | Yes | Yes | Yes | Yes | No | No | No |
| Template:Rh| CenterTools DriveLock | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| CGD | ? | No | ? | No | No | No | No | Yes |
| Template:Rh| Check Point Full Disk Encryption | ? | Yes | ? | Yes | Yes[44] | No | No | No |
| Template:Rh| CipherShed | Yes[45] | Yes | ? | Yes | Yes | No[46] | No | No |
| Template:Rh| CrossCrypt | No | Yes[47] | ? | No | No | No | No | No |
| Template:Rh| CryFS | No | Yes | ? | Yes | Yes | Yes | No | Yes |
| Template:Rh| Cryhod | ? | Yes | ? | No | Yes | No | No | No |
| Template:Rh| Cryptainer | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| CryptArchiver | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| Cryptic Disk | No | Yes | No | No | No | No | No | No |
| Template:Rh| Cryptoloop | ? | Yes[48] | ? | No | Yes | No | No | No |
| Template:Rh| Cryptomator | Yes | Yes[49] | Yes | Yes | Yes | No | No | No |
| Template:Rh| CryptoPro Secure Disk Enterprise | No | Yes | ? | No | No | No | No | No |
| Template:Rh| CryptoPro Secure Disk for BitLocker | No | Yes | ? | No | No | No | No | No |
| Template:Rh| Cryptsetup / Dmsetup | ? | Yes[48] | ? | No | Yes | No | No | No |
| Template:Rh| CryptSync | No | Yes | ? | Yes | Yes | No | No | No |
| Template:Rh| Discryptor | ? | No | ? | No | No | No | No | No |
| Template:Rh| DiskCryptor | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| DISK Protect | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| Dm-crypt / LUKS | ? | Yes[48] | ? | No | Yes | No | No | No |
| Template:Rh| DriveSentry GoAnywhere 2 | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| E4M | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| e-Capsule Private Safe | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| eCryptfs | ? | No | ? | No | Yes | No | No | No |
| Template:Rh| EgoSecure HDD Encryption | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| EncFS | Yes[50] | Yes[51] | ? | Yes[51] | Yes (FUSE) | Yes (FUSE) | Yes (FUSE) | Yes (FUSE) |
| Template:Rh| EncryptStick | ? | Yes | ? | Yes | Yes | No | No | No |
| Template:Rh| EncryptUSB | ? | Yes | ? | Yes | No | No | No | No |
| Template:Rh| FileVault | ? | No | ? | Yes | No | No | No | No |
| Template:Rh| FileVault 2 | ? | No | ? | Yes | Partial[52] | No | No | No |
| Template:Rh| FREE CompuSec | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| FreeOTFE | No | Yes | ? | No | Partial[53] | No | No | No |
| Template:Rh| GBDE | ? | No | ? | No | No | Yes | No | No |
| Template:Rh| GELI | ? | No | ? | No | No | Yes | No | No |
| Template:Rh| Knox | ? | No | ? | Yes | No | No | No | No |
| Template:Rh| LibreCrypt | Yes[54] | Yes | ? | No | Partial[55] | No | No | No |
| Template:Rh| Loop-AES | ? | No | ? | No | Yes | No | No | No |
| Template:Rh| McAfee Drive Encryption (SafeBoot) | ? | Yes | ? | Yes | No | No | No | No |
| Template:Rh| n-Crypt Pro | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| PGPDisk | ? | Yes | ? | Yes | No | No | No | No |
| Template:Rh| PGP Whole Disk Encryption | ? | Yes | ? | Yes | Yes | No | No | No |
| Template:Rh| Private Disk | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| ProxyCrypt | No | Yes | ? | No | No | No | No | No |
| Template:Rh| R-Crypto | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| SafeGuard Easy | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| SafeGuard Enterprise | ? | Yes | ? | Yes | No | No | No | No |
| Template:Rh| SafeGuard PrivateDisk | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| SafeHouse Professional | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| Scramdisk | ? | Yes | ? | No | Yes | No | No | No |
| Template:Rh| Scramdisk 4 Linux | ? | No | ? | No | Yes | No | No | No |
| Template:Rh| SecuBox | ? | No | ? | No | No | No | No | No |
| Template:Rh| SecureDoc | ? | Yes | ? | Yes | Yes | No | No | No |
| Template:Rh| Sentry 2020 | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| Seqrite Volume Encryption | No | Yes | No | No | No | No | No | No |
| Template:Rh| Softraid / RAID C | ? | No | ? | No | No | No | Yes | No |
| Template:Rh| SpyProof! | ? | Yes | ? | No | No | No | No | No |
| Template:Rh| Svnd / Vnconfig | ? | No | ? | No | No | No | Yes | No |
| Template:Rh| Symantec Endpoint Encryption | ? | Yes | ? | Yes | No[56] | No | No | No |
| Template:Rh| Tcplay | No | No | ? | No | Yes | No | No | No |
| Template:Rh| Trend Micro Endpoint Encryption | No | Yes | ? | Yes | No | No | No | No |
| Template:Rh| TrueCrypt | Yes[45] | Yes | Yes | Yes | Yes | No[57] | No | No |
| Template:Rh| USBCrypt | No | Yes | ? | No | No | No | No | No |
| Template:Rh| VeraCrypt | Yes[58] | Yes | Yes[59] | Yes | Yes | Yes | No | No |
| Template:Rh| CyberSafe Top Secret | Yes | Yes | ? | No | No | No | No | No |
| Name | Android | Windows NT | iOS | Mac OS X | Linux | FreeBSD | OpenBSD | NetBSD |
Features
- Hidden containers: Whether hidden containers (an encrypted container (A) within another encrypted container (B) so the existence of container A can not be established)[60] can be created for deniable encryption. Note that some modes of operation like CBC with a plain IV can be more prone to watermarking attacks than others.
- Pre-boot authentication: Whether authentication can be required before booting the computer, thus allowing one to encrypt the boot disk.
- Single sign-on: Whether credentials provided during pre-boot authentication will automatically log the user into the host operating system, thus preventing password fatigue and reducing the need to remember multiple passwords.
- Custom authentication: Whether custom authentication mechanisms can be implemented with third-party applications.[<span title="Script error: No such module "decodeEncode".">clarification needed]
- Multiple keys: Whether an encrypted volume can have more than one active key.
- Passphrase strengthening: Whether key strengthening is used with plain text passwords to frustrate dictionary attacks, usually using PBKDF2 or Argon2.
- Hardware acceleration: Whether dedicated cryptographic accelerator expansion cards can be taken advantage of.
- Trusted Platform Module: Whether the implementation can use a TPM cryptoprocessor.
- Filesystems: What filesystems are supported.
- Two-factor authentication: Whether optional security tokens (hardware security modules, such as Aladdin eToken and smart cards) are supported (for example using PKCS#11)
| Name | Hidden containers | Pre-boot authentication | Single sign-on | Custom authentication | Multiple keys | Passphrase strengthening | Hardware acceleration | TPM | Filesystems | Two-factor authentication |
|---|---|---|---|---|---|---|---|---|---|---|
| Aloaha Secure Stick | Yes | No | Template:Screen reader-only | Yes | Yes | No | No | No | NTFS, FAT32 | Yes |
| ArchiCrypt Live | Yes[61] | No | Template:Screen reader-only | No | Yes[61][62] | No | No | No | ? | Yes[61][63] |
| BestCrypt | Yes | Yes | Yes | Yes | Yes[64] | Yes | Yes | Yes | Any supported by OS | Yes[65] |
| BitArmor DataControl | No | Yes | ? | No | Yes | Yes | No | No | NTFS, FAT32 on non-system volumes | No |
| BitLocker | No | Yes[66] | No | Yes[67] | Yes[68] | Yes[69] | Yes | Yes[68] | Chiefly NTFS [Note 1]Template:R/superscript | Yes [Note 2]Template:R/superscript |
| Bloombase StoreSafe | No | No | Template:Screen reader-only | Yes | Yes | Yes | Yes | No | Any supported by OS | Yes |
| CGD | No | No | Template:Screen reader-only | Yes[70] | Yes[71] | Yes[70] | No | No | Any supported by OS | Yes[70] |
| CenterTools DriveLock | No | Yes | Yes | No | No | Yes | No | No | Any supported by OS | Yes |
| Check Point Full Disk Encryption | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | NTFS, FAT32 | Yes |
| CipherShed | Yes (limited to one per "outer" container) |
only on Windows[72] | ? | No | yes with multiple keyfiles[73][74] | Yes | Yes | No[75] | Only Windows MBR volumes; no UEFI GPT drives, and dynamic drives discouraged[76] | Yes |
| CryFS | No | No | Template:Screen reader-only | No | No | Yes[77] | No | No | Any supported by OS | No |
| CrossCrypt | No | No | Template:Screen reader-only | No | No | No | No | No | ? | No |
| CryptArchiver | No | No | Template:Screen reader-only | No | No | ? | No | No | ? | ? |
| Cryptic Disk | Yes | No | No | No | Yes | Yes | Yes | No | Any supported by OS | Yes |
| Cryhod | No | Yes | Yes | No | Yes | Yes | Yes | No | Any supported by OS | Yes |
| Cryptoloop | No | Yes[78] | ? | Yes | No | No | Yes[citation needed] | No | Any supported by OS | ? |
| Cryptomator | No | No | Template:Screen reader-only | No | No | Yes | Yes | No | Any supported by OS | No |
| CryptoPro Secure Disk Enterprise | Yes with add-on Secure Device | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Any supported by OS | Yes |
| CryptoPro Secure Disk for BitLocker | Yes with add-on Secure Device | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Any supported by OS | Yes |
| Cryptsetup / Dmsetup | No | Yes[78] | ? | Yes | No | No | Yes | No | Any supported by OS | Yes |
| DiskCryptor | No | Yes | ? | No | No | No | Yes[79] | No | Windows volumes on MBR and UEFI GPT drives, ReFs any FS supported by OS[80] | Yes[79] |
| DISK Protect | No | Yes[81] | Yes | No | Yes[81] | No | Yes | Yes | NTFS, FAT32 | Yes |
| Dm-crypt / LUKS | No | Yes[78] | ? | Yes | Yes | Yes | Yes | Partial[82] [Note 3]Template:R/superscript | Any supported by OS | Yes |
| DriveSentry GoAnywhere 2 | No | No | Template:Screen reader-only | Yes | No | Yes | No | ? | Any supported by OS | Yes |
| E4M | No | No | Template:Screen reader-only | No | No | ? | No | No | ? | No |
| e-Capsule Private Safe | Yes[83] | No | Template:Screen reader-only | No | Yes[83] | No | Yes | No | ? | ? |
| eCryptfs | No | No | Template:Screen reader-only | Yes | Yes | Yes | Yes | Yes | Yes[84] | Yes |
| EgoSecure HDD Encryption | No | Yes | Yes | Yes | Yes | Yes | Yes[85] | Yes | NTFS, FAT32 | Yes |
| EncryptUSB | No | No | No | No | No | Yes | No | No | NTFS, FAT32, exFAT | No |
| FileVault | No | No | Template:Screen reader-only | No | Two passwords[86] | Yes[86] | ? | No | HFS+, possibly others | No |
| FileVault 2 | No | Yes | Yes | No | Yes | Yes | Yes[87] | No | HFS+, possibly others | No |
| FREE CompuSec | No | Yes | ? | No | No | No | No | No | Any supported by OS | No |
| FreeOTFE | Yes | No | Template:Screen reader-only | Yes[88] | Yes[89] | Yes | Yes | No | Any supported by OS | Yes |
| GBDE | No | No[90] | Template:Screen reader-only | Yes | Yes[91] | No[91] | No[90] | No | Any supported by OS | Yes |
| GELI | No | Yes[90] | ? | Yes | Yes[92] | Yes[92] | Yes[90] | No | Any supported by OS | Yes |
| Loop-AES | No | Yes[93] | ? | Yes[93] | Yes[93] | Yes[93] | Yes[93] | No | Any supported by OS | Yes[94] |
| McAfee Drive Encryption (SafeBoot) | Yes | Yes | Yes | Yes | Yes | Yes | Yes[85][95] | Yes | Any supported by OS | Yes |
| n-Crypt Pro | No | No | Template:Screen reader-only | No | No | Template:Screen reader-only[96] | No | No | ? | ? |
| PGPDisk | No | Yes[97] | Yes | ? | Yes | Yes[98] | ? | Yes | ? | Yes |
| Private Disk | No | No | Template:Screen reader-only | No | Yes | Yes | No | No | Any supported by OS | Yes |
| ProxyCrypt | Yes | No | No | No | No | Yes | Yes | No | Any supported by OS | Yes |
| R-Crypto | ? | No | Template:Screen reader-only | ? | ? | ? | ? | ? | Any supported by OS | ? |
| SafeGuard Easy | No | Yes | ? | No | Yes | Yes | No | Yes[99] | Any supported by OS | Yes |
| SafeGuard Enterprise | No | Yes | Yes | No | Yes | Yes | No | Yes[99] | Any supported by OS | Yes |
| SafeGuard PrivateDisk | No | No | Template:Screen reader-only | No | Yes | Yes | No | Yes[100] | Any supported by OS | Yes |
| SafeHouse Professional | No | No | Template:Screen reader-only | Yes | Yes | Yes | No | No | Any supported by OS | Yes |
| Scramdisk | Yes | No | Template:Screen reader-only | No | No | No | No | No | ? | Last update to web site 2009-07-02 |
| Scramdisk 4 Linux | Yes[101] | No | Template:Screen reader-only | No | No | Yes[101] | No | No | ext2, ext3, reiserfs, minix, ntfs, vfat/msdos | No |
| SecuBox | No | No | Template:Screen reader-only | No | No | Yes | No | No | ? | No |
| SecureDoc | No | Yes[102] | ? | Yes | Yes | Yes | Yes | Yes | ? | Yes |
| Seqrite Encryption Manager | No | Yes | Yes | No | Yes | Yes | Yes | No | Any supported by OS | No |
| Sentry 2020 | No | No | ? | No | No | No | No | No | ? | No |
| Softraid / RAID C | No | No | ? | ? | ? | ? | Yes | ? | Any supported by OS | ? |
| Svnd / Vnconfig | No | No | Template:Screen reader-only | No | No | Yes[103] | Yes | ? | Any supported by OS | ? |
| Symantec Endpoint Encryption | No | Yes | Yes | Yes | Yes | Yes | No | No | NTFS, FAT32 | Yes |
| Trend Micro Endpoint Encryption | No | Yes | Yes | Yes | Yes | Yes[104] | Yes[105] | No | Any supported by OS | Yes[106] |
| TrueCrypt [Note 4]Template:R/superscript | Yes (limited to one per "outer" container) |
only on Windows[107] | ? | No | yes with multiple keyfiles[74][108] | Yes | Yes | No[75] | Only Windows MBR volumes; no UEFI GPT drives, and dynamic drives discouraged[76] | Yes |
| VeraCrypt | Yes (limited to one per "outer" container) |
only on Windows[109] | No | No | yes with multiple keyfiles | Yes | Yes | No | Windows on both MBR and UEFI GPT drives; dynamic drives discouraged | Yes |
| CyberSafe Top Secret | Yes | No | No | No | Yes | Yes | Yes | No | Only Windows MBR volumes; no UEFI GPT drives, and dynamic drives discouraged | Yes |
| Name | Hidden containers | Pre-boot authentication | Single sign-on | Custom authentication | Multiple keys | Passphrase strengthening | Hardware acceleration | TPM | Filesystems | Two-factor authentication |
Page Template:Reflist/styles.css has no content.
- ^ Windows 7 introduces Bitlocker-To-Go which supports NTFS, FAT32 or exFAT, however for hard drive encryption, Windows Vista and later are limited to be installable only on NTFS volumes
- ^ BitLocker can be used with a TPM PIN + external USB key for two-factor authentication
- ^ An external tool can be used to read the key from the TPM and then have the key passed on to dm-crypt/LUKS via the standard input
- ^ The current situation around TrueCrypt project is controversial. On 28.05.2014 after many years of development and broad usage the open-source (although anonymous) project was suddenly stopped, and all previous official materials and complete (encrypt/decrypt) binaries were withdrawn from its website citing some "unfixed security issues" and Windows XP end of support. The technical information herein is valid only for previous versions of TrueCrypt (v7.1a and some earlier). The latest available version (v7.2) is decrypt only, its authenticity and actual reasons behind the move are unclear, and its usage is not recommended. https://www.zdnet.com/article/truecrypt-quits-inexplicable/
Layering
- Whole disk: Whether the whole physical disk or logical volume can be encrypted, including the partition tables and master boot record. Note that this does not imply that the encrypted disk can be used as the boot disk itself; refer to pre-boot authentication in the features comparison table.
- Partition: Whether individual disk partitions can be encrypted.
- File: Whether the encrypted container can be stored in a file (usually implemented as encrypted loop devices).
- Swap space: Whether the swap space (called a "pagefile" on Windows) can be encrypted individually/explicitly.
- Hibernation file: Whether the hibernation file is encrypted (if hibernation is supported).
| Name | Whole disk | Partition | File | Swap space | Hibernation file | RAID |
|---|---|---|---|---|---|---|
| Aloaha Secure Stick | No | No | Yes | No | No | ? |
| ArchiCrypt Live | Yes (except for the boot volume) |
Yes | Yes | No | No | ? |
| BestCrypt | Yes | Yes | Yes | Yes | Yes[110] | ? |
| BitArmor DataControl | No | Yes | No | Yes | Yes | ? |
| BitLocker | Yes (except for the boot volume) |
Yes | Yes[111] | Yes (parent volume is encrypted) |
Yes (parent volume is encrypted) |
? |
| Bloombase StoreSafe | Yes | Yes | Yes | Yes | No | Yes |
| CenterTools DriveLock | Yes | Yes | Yes | Yes | Yes | ? |
| CGD | Yes | Yes | Yes[70] | Yes | No | ? |
| Check Point Full Disk Encryption | Yes | Yes | Yes | Yes | Yes | ? |
| CipherShed | Yes | Yes | Yes | Yes | only on Windows | ? |
| CrossCrypt | No | No | Yes | No | No | ? |
| CryFS | No | No | No | No | No | ? |
| CryptArchiver | No | No | Yes | No | No | ? |
| Cryptic Disk | No | Yes | Yes | No | No | ? |
| Cryhod | No | Yes | No | Yes | Yes (parent volume is encrypted) |
? |
| Cryptoloop | Yes | Yes | Yes | Yes | No | ? |
| Cryptomill | Yes | Template:Screen reader-only | Yes | Template:Screen reader-only | Template:Screen reader-only | ? |
| CryptoPro Secure Disk Enterprise | Yes | Yes | Yes (add-on Secure Device) |
Yes | Yes | ? |
| CryptoPro Secure Disk for BitLocker | Yes | Yes | Yes | Yes | Yes | ? |
| DiskCryptor | No | Yes | No | Yes | Yes | ? |
| Disk Protect | Yes | No | No | Yes | Yes | ? |
| Dm-crypt / LUKS | Yes | Yes | Yes[112] | Yes | Yes[113] | ? |
| DriveSentry GoAnywhere 2 | No | Yes | Yes | No | No | ? |
| E4M | No | Yes | Yes | No | No | ? |
| e-Capsule Private Safe | No | No | Yes[114] | No | No | ? |
| eCryptfs | No | No | Yes | No | No | ? |
| EgoSecure HDD Encryption | Yes | Yes | Yes | Yes | Yes | ? |
| EncryptUSB | No | No | Yes | No | No | ? |
| FileVault | No | No | Yes[86] | Yes[115][86] | Yes[115][116] | |
| FileVault 2 | Yes[117] | Yes[87] | No | Yes | Yes | ? |
| FREE CompuSec | Yes | No | Yes | Yes | Yes | ? |
| FreeOTFE | Yes (except for the boot volume) |
Yes | Yes | No | No | ? |
| GBDE | Yes | Yes | Yes[118] | Yes | No | ? |
| GELI | Yes | Yes | Yes[118] | Yes | No | ? |
| Loop-AES | Yes | Yes[93] | Yes[93] | Yes[93] | Yes[93] | ? |
| McAfee Drive Encryption (SafeBoot) | Yes | Yes | Yes | Yes | Yes[119] | ? |
| n-Crypt Pro | Yes | Yes | Yes | No | No | ? |
| PGPDisk | Yes | Yes | Yes | Yes | only on Windows | ? |
| Private Disk | No | No | Yes | No | No | ? |
| ProxyCrypt | Yes | Yes | Yes | No | No | ? |
| R-Crypto | No | No | Yes | No | No | ? |
| SafeGuard Easy | Yes | Yes | extra module | Yes | Each sector on disk is encrypted | ? |
| SafeGuard Enterprise | Yes | Yes | Yes | Yes | Each sector on disk is encrypted | ? |
| SafeGuard PrivateDisk | No | No | Yes | No | No | ? |
| SafeHouse Professional | No | No | Yes | No | No | ? |
| Scramdisk | No | Yes | Yes | No | No | ? |
| Scramdisk 4 Linux | Yes | Yes | Yes | Yes | No | ? |
| SecuBox | No | No | Yes | Template:Screen reader-only | No | ? |
| Sentry 2020 | No | No | Yes | No | No | ? |
| Seqrite Encryption Manager | Yes | Yes | Yes | Yes | Yes | RAID-5 |
| Softraid / RAID C | Yes | Yes | No | Yes (encrypted by default in OpenBSD)[120] | No | ? |
| Svnd / Vnconfig | ? | Yes | Yes | Yes (encrypted by default in OpenBSD) | ? | ? |
| SpyProof! | No | Yes | Yes | No | No | ? |
| Symantec Endpoint Encryption | Yes | Yes | Yes | Yes | Yes | ? |
| Trend Micro Endpoint Encryption | Yes | Yes | Yes | Yes | Yes | ? |
| TrueCrypt | Yes[121] | Yes | Yes | Yes | only on Windows[107] | ? |
| VeraCrypt | Yes | Yes | Yes | Yes | only on Windows[107] | ? |
| CyberSafe Top Secret | No | Yes | Yes | No | No | ? |
| Name | Whole disk | Partition | File | Swap space | Hibernation file | RAID |
Modes of operation
Script error: No such module "labelled list hatnote".
Different modes of operation supported by the software. Note that an encrypted volume can only use one mode of operation.
- CBC with predictable IVs: The CBC (cipher block chaining) mode where initialization vectors are statically derived from the sector number and are not secret; this means that IVs are re-used when overwriting a sector and the vectors can easily be guessed by an attacker, leading to watermarking attacks.
- CBC with secret IVs: The CBC mode where initialization vectors are statically derived from the encryption key and sector number. The IVs are secret, but they are re-used with overwrites. Methods for this include ESSIV and encrypted sector numbers (CGD).
- CBC with random per-sector keys: The CBC mode where random keys are generated for each sector when it is written to, thus does not exhibit the typical weaknesses of CBC with re-used initialization vectors. The individual sector keys are stored on disk and encrypted with a master key. (See GBDE for details)
- LRW: The Liskov-Rivest-Wagner tweakable narrow-block mode, a mode of operation specifically designed for disk encryption. Superseded by the more secure XTS mode due to security concerns.[122]
- XTS: XEX-based Tweaked CodeBook mode (TCB) with CipherText Stealing (CTS), the SISWG (IEEE P1619) standard for disk encryption.
- Authenticated encryption: Protection against ciphertext modification by an attacker
| Name | CBC w/ predictable IVs | CBC w/ secret IVs | CBC w/ random per-sector keys | LRW | XTS | Authenticated encryption |
|---|---|---|---|---|---|---|
| Aloaha Crypt Disk | No | No | No | Yes | Yes | ? |
| ArchiCrypt Live | No | No | No | Legacy support[123] | Yes | ? |
| BestCrypt | No | Yes | No | Yes[124] | Yes[125] | ? |
| BitArmor DataControl | No | Yes | Plumb-IV | No | No | ? |
| BitLocker | No[126] | Yes[126] | No | No | Yes, Windows 10 10547+ | ? |
| Bloombase StoreSafe | Yes | Yes | Yes | Yes | Yes | ? |
| CGD | No | Yes[127] | No | No | No | ? |
| CenterTools DriveLock | ? | ? | ? | ? | ? | ? |
| Check Point Full Disk Encryption | No | No | Yes | Yes | Yes | ? |
| CipherShed | Legacy support[128] | No | No | Legacy support[129] | Yes[130] | ? |
| CrossCrypt | Yes | No | No | No | No | ? |
| CryFS | No | No | Yes | No | No | ? |
| CryptArchiver | ? | ? | ? | ? | ? | ? |
| Cryptic Disk | No | No | No | No | Yes | No |
| Cryhod | No | Yes | No | No | Yes[131] | ? |
| Cryptoloop | Yes | No | No | No | No | No |
| DiskCryptor | No | No | No | No | Yes | ? |
| Dm-crypt / LUKS | Yes | Yes | No | Yes, using *-lrw-benbi[132] | Yes, using *-xts-plain | Yes, using --integrity mode[133]
|
| DriveSentry GoAnywhere 2 | ? | ? | ? | ? | ? | ? |
| E4M | ? | ? | ? | No | No | ? |
| e-Capsule Private Safe | ? | ? | ? | ? | ? | ? |
| eCryptfs | No | Yes | ? | No | No | ? |
| EgoSecure HDD Encryption | No | Yes | No | No | No | ? |
| FileVault | Yes[86] | No | No | No | No | ? |
| FileVault 2 | No | No | No | No | Yes[134] | ? |
| FREE CompuSec | Yes | No | No | No | No | ? |
| FreeOTFE | Yes | Yes | No | Yes | Yes | No |
| GBDE | No | No | Yes[91] | No | No | ? |
| GELI | No | Yes[135] | No | No | Yes | Yes, using -a option[136]
|
| Loop-AES | single-key, multi-key-v2 modes[93] | multi-key-v3 mode[93] | No | No | No | No |
| McAfee Drive Encryption (SafeBoot) | No | Yes | No | No | No | ? |
| n-Crypt Pro | ? | ? | No | No | No | ? |
| PGPDisk | ? | ? | ? | ? | ? | ? |
| Private Disk | No | Yes | No | No | No | ? |
| ProxyCrypt | No | No | No | No | Yes | ? |
| R-Crypto | ? | ? | ? | ? | ? | ? |
| SafeGuard Easy | ? | ? | ? | ? | ? | ? |
| SafeGuard Enterprise | ? | ? | ? | ? | ? | ? |
| SafeGuard PrivateDisk | ? | ? | ? | ? | ? | ? |
| SafeHouse Professional | Yes | No | No | No | No | ? |
| Scramdisk | No | Yes | No | No | No | ? |
| Scramdisk 4 Linux | No | Yes[137] | No | Yes[138] | Yes[139] | ? |
| SecuBox | Yes | No | No | No | No | ? |
| SecureDoc | ? | ? | ? | ? | ? | ? |
| Sentry 2020 | ? | ? | ? | ? | ? | ? |
| Seqrite Encryption Manager | No | Yes | No | Yes | Yes | ? |
| Softraid / RAID C | ? | ? | ? | ? | Yes[140] | ? |
| Svnd / Vnconfig | ? | ? | ? | ? | ? | ? |
| Symantec Endpoint Encryption | No | No | Yes | No | No | ? |
| TrueCrypt | Legacy support[128] | No | No | Legacy support[129] | Yes[141] | No |
| USBCrypt | No | Yes | No | No | Yes | ? |
| VeraCrypt | No | No | No | No | Yes | ? |
| CyberSafe Top Secret | No | No | No | No | Yes | ? |
| Name | CBC w/ predictable IVs | CBC w/ secret IVs | CBC w/ random per-sector keys | LRW | XTS | Authenticated encryption |
See also
- Cold boot attack
- Comparison of encrypted external drives
- Disk encryption software
- Disk encryption theory
- List of cryptographic file systems
- List of cryptography software
Notes and references
Page Template:Reflist/styles.css has no content.
- ^ Page Module:Citation/CS1/styles.css has no content."Jetico Mission". Jetico. Retrieved 2014-05-30.
- ^ Page Module:Citation/CS1/styles.css has no content."Bloombase StoreSafe". Bloombase. Retrieved 2014-11-28.
- ^ Page Module:Citation/CS1/styles.css has no content.Roland Dowdeswell (2002-10-04). "CryptoGraphic Disk". mailing list announcement. Retrieved 2007-01-14.
- ^ Page Module:Citation/CS1/styles.css has no content."Protect guards laptop and desktop data". Archived from the original on March 2, 2005. Retrieved 2008-09-03.
- ^ Company and product name change to Pointsec Page Module:Citation/CS1/styles.css has no content."Protect Data Security Inc. changes name to Pointsec Mobile Technologies Inc". Archived from the original on 2004-08-20. Retrieved 2008-09-03.
- ^ Page Module:Citation/CS1/styles.css has no content."Check Point Completes the Offer for Protect Data with Substantial Acceptance of 87.1 Percent". Archived from the original on 2008-08-20. Retrieved 2008-09-03.
- ^ Page Module:Citation/CS1/styles.css has no content.Niklas Lemcke (2014-12-15). "Pre-Alpha testing started". Retrieved 2014-12-24.
- ^ Page Module:Citation/CS1/styles.css has no content."TrueCrypt License Version 3.0". TrueCrypt Foundation. 2012-02-07. Retrieved 2014-12-24.
- ^ Page Module:Citation/CS1/styles.css has no content.Sarah Dean (2004-02-10). "OTFEDB entry". Archived from the original on 2008-12-11. Retrieved 2008-08-10.
- ^ Initial cryptoloop patches for the Linux 2.5 development kernel: Page Module:Citation/CS1/styles.css has no content."Archived copy". Archived from the original on 2005-01-10. Retrieved 2006-12-24.
{{cite web}}: CS1 maint: archived copy as title (link) - ^ Page Module:Citation/CS1/styles.css has no content."Home". cryptomator.org.
- ^ Page Module:Citation/CS1/styles.css has no content."Releases · DavidXanatos/DiskCryptor". GitHub.
- ^ dm-crypt was first included in Linux kernel version 2.6.4: https://lwn.net/Articles/75404/
- ^ Page Module:Citation/CS1/styles.css has no content.Clemens Fruhwirth. "LUKS version history". Archived from the original on 2006-12-25. Retrieved 2006-12-24.
- ^ Page Module:Citation/CS1/styles.css has no content."archived E4M documentation". Archived from the original on 2000-05-24.
- ^ Page Module:Citation/CS1/styles.css has no content."eCryptfs". Retrieved 2008-04-29.
- ^ Page Module:Citation/CS1/styles.css has no content.Valient Gough (2003). "EncFS - an Encrypted Filesystem". README.md file. Retrieved 2007-01-14.
- ^ Page Module:Citation/CS1/styles.css has no content."FreeOTFE version history". Archived from the original on 2006-12-07. Retrieved 2006-12-24.
- ^ Page Module:Citation/CS1/styles.css has no content."gbde(4) man page in FreeBSD 4.11". GBDE manual page as it appeared in FreeBSD 4.11. Retrieved 2006-12-24.
- ^ Page Module:Citation/CS1/styles.css has no content."geli(8) man page in FreeBSD 6.0". GELI manual page as it first appeared in FreeBSD 6.0. Retrieved 2006-12-24.
- ^ Release Notes. GnuPG
- ^ Page Module:Citation/CS1/styles.css has no content."gocryptfs changelog on github". GitHub. Retrieved 2018-01-16.
- ^ Page Module:Citation/CS1/styles.css has no content."as received from FreeOTFE version v5.21 with small changes". GitHub. 2014-06-20. Retrieved 2015-09-14.
- ^ Page Module:Citation/CS1/styles.css has no content."McAfee Drive Encryption". product description. McAfee. Retrieved 2019-07-31.
- ^ Page Module:Citation/CS1/styles.css has no content."PGP 6.0 Freeware released- any int'l links?". Newsgroup: comp.security.pgp. Usenet: 6sh4vm$jbf$1@news.cybercity.dk. Retrieved 2007-01-04.
- ^ Page Module:Citation/CS1/styles.css has no content."Dekart Encryption software timeline". Dekart.
- ^ Page Module:Citation/CS1/styles.css has no content."SafeGuard Easy 4.5 Technical Whitepaper" (PDF). Utimaco. Retrieved 2009-08-10.
- ^ Page Module:Citation/CS1/styles.css has no content."SafeGuard Enterprise Technical Whitepaper" (PDF). Utimaco. Retrieved 2009-08-10.
- ^ Rebranded as ThinkVantage Client Security Template:Cite FTP
- ^ Page Module:Citation/CS1/styles.css has no content."ScramDisk 4 Linux Releases".
- ^ Page Module:Citation/CS1/styles.css has no content."Sentry 2020 news". Retrieved 2007-01-02.
- ^ Page Module:Citation/CS1/styles.css has no content."OpenBSD 4.2 Changelog".
- ^ Page Module:Citation/CS1/styles.css has no content."OpenBSD 2.8 Changelog".
- ^ Page Module:Citation/CS1/styles.css has no content."bwalex/tc-play". GitHub. 2019-08-27.
- ^ Last update: 2020-03-02 Page Module:Citation/CS1/styles.css has no content."bwalex/tc-play". Github. 2023-04-03.
- ^ Trend Micro
- ^ Page Module:Citation/CS1/styles.css has no content."Mobile Armor: Your Data.Secure. Everywhere". 4 September 2004. Archived from the original on 4 September 2004.
- ^ Page Module:Citation/CS1/styles.css has no content."TrueCrypt".
- ^ Page Module:Citation/CS1/styles.css has no content."TrueCrypt License Version 3.1". TrueCrypt Foundation. 2014-05-28. Retrieved 2014-05-29.
- ^ Page Module:Citation/CS1/styles.css has no content."VeraCrypt".
- ^ Page Module:Citation/CS1/styles.css has no content."Apache License 2.0". IDRIX. 2015-06-28. Archived from the original on 2015-07-09. Retrieved 2015-08-08.
- ^ Page Module:Citation/CS1/styles.css has no content."Whole Hard Disk Encryption Software - BestCrypt Volume Encryption - Jetico Inc. Oy".
- ^ a b https://github.com/Aorimn/dislocker FUSE driver to read/write Windows BitLocker-ed volumes under Linux / Mac OSX. In addition cryptsetup and Linux 5.6+ can open bitlocker volumes (except volumes with legacy header used in Windows Vista or partially decrypted volumes) with either a password, a recovery passphrase, a startup key, or the volume key.
- ^ Page Module:Citation/CS1/styles.css has no content."Archived copy" (PDF). Archived from the original (PDF) on 2015-09-23. Retrieved 2014-12-14.
{{cite web}}: CS1 maint: archived copy as title (link) - ^ a b https://play.google.com/store/apps/details?id=com.sovworks.edslite Third party app allows to open containers encryptes with AES-256, SHA-512 hash and FAT file system
- ^ http://www.truecrypt.org/misc/freebsd Although CipherShed can be built under FreeBSD, it is not recommended to run it because of bugs and instabilities when CipherShed is attempted to be used
- ^ CrossCrypt - Only for the Microsoft Windows XP/2000 operating systems
- ^ a b c http://www.freeotfe.org/docs/Main/Linux_volumes.htm FreeOTFE supports cryptoloop, dm-crypt/cryptsetup/dmsetup, and dm-crypt/LUKS volumes
- ^ Page Module:Citation/CS1/styles.css has no content."Cryptomator - Free Cloud Encryption".
- ^ Page Module:Citation/CS1/styles.css has no content."Boxcryptor - Encryption for cloud storage - Window, Mac, Android, iOS".
- ^ a b Page Module:Citation/CS1/styles.css has no content."Safe - Protect Your Files". Archived from the original on 2016-04-21. Retrieved 2016-03-29.
- ^ https://code.google.com/p/libfvde/ libfvde supports reading FileVault2 Drive Encryption (FVDE) encrypted volumes. In addition cryptsetup also has partial FileVault2 support: it can open FileVault2 volumes with Core Storage and HFS+ filesystem, with a password.
- ^ http://www.freeotfe.org/docs/Main/Linux_volumes.htm Supports Linux volumes
- ^ https://play.google.com/store/apps/details?id=com.nemesis2.luksmanager&hl=en_GB Third party app allows a user to open LibreCrypt compatible LUKS containers
- ^ https://github.com/t-d-k/LibreCrypt/blob/master/docs/Linux_volumes.md Supports Linux volumes
- ^ Page Module:Citation/CS1/styles.css has no content."Endpoint Encryption Powered by PGP Technology - Symantec".
- ^ http://www.truecrypt.org/misc/freebsd Although TrueCrypt can be built under FreeBSD, it is not recommended to run it because of bugs and instabilities when TrueCrypt is attempted to be used
- ^ https://play.google.com/store/apps/details?id=com.sovworks.eds.android Third party app allows to encrypt and decrypt VeraCrypt containers (only available in the paid version)
- ^ https://apps.apple.com/de/app/disk-decipher/id516538625 Third party app allows to encrypt and decrypt VeraCrypt containers (only available in the paid version)
- ^ http://www.jetico.com/linux/bcrypt-help/c_hiddn.htm Hidden containers description from Jetico (BestCrypt)
- ^ a b c Secret-containers and Camouflage files ArchiCrypt Live Description Script error: No such module "webarchive".
- ^ Supports "Guest" keys
- ^ Using "Archicrypt Card"
- ^ Supported by the BestCrypt container format; see BestCrypt SDK
- ^ Supported by the BestCrypt Volume Encryption software
- ^ With PIN or USB key
- ^ BitLocker Drive Encryption: Value Add Extensibility Options
- ^ a b Page Module:Citation/CS1/styles.css has no content."BitLocker Drive Encryption Technical Overview". Microsoft. Archived from the original on 2008-02-24. Retrieved 2008-03-13.
- ^ Recovery keys only.
- ^ a b c d Page Module:Citation/CS1/styles.css has no content.Roland C. Dowdeswell, John Ioannidis. "The CryptoGraphic Disk Driver" (PDF). CGD Design Paper. Retrieved 2006-12-24.
- ^ Page Module:Citation/CS1/styles.css has no content.Federico Biancuzzi (2005-12-21). "Inside NetBSD's CGD". interview with Roland Dowdeswell. ONLamp.com. Archived from the original on 2007-09-29. Retrieved 2006-12-24.
- ^ Page Module:Citation/CS1/styles.css has no content."Operating Systems Supported for System Encryption" (PDF). CipherShed Documentation. CipherShed Project. Retrieved 2014-12-27.
- ^ Although each volume encrypted with CipherShed can only have one active master key, it is possible to access its contents through more than one header. Each header can have a different password and/or keyfiles if any (cf. TrueCrypt FAQ: Is there a way for an administrator to reset a volume password or pre-boot authentication password when a user forgets it (or loses a keyfile)?)
- ^ a b Page Module:Citation/CS1/styles.css has no content."Keyfiles". TrueCrypt Documentation. TrueCrypt Foundation. Retrieved 2014-05-28.
- ^ a b Page Module:Citation/CS1/styles.css has no content."Some encryption programs use TPM to prevent attacks. Will TrueCrypt use it too?". TrueCrypt FAQ. TrueCrypt Foundation. Retrieved 2014-05-28.
{{cite web}}: CS1 maint: deprecated archival service (link) - ^ a b Page Module:Citation/CS1/styles.css has no content."Future". TrueCrypt Foundation. Retrieved 2014-05-24.[permanent dead link]
- ^ Page Module:Citation/CS1/styles.css has no content."CryFS: How it works". Retrieved 2016-09-23.
- ^ a b c dm-crypt and cryptoloop volumes can be mounted from the initrd before the system is booted
- ^ a b Page Module:Citation/CS1/styles.css has no content."DiskCryptor Features". Archived from the original on 2010-05-29. Retrieved 2010-05-25.
- ^ Page Module:Citation/CS1/styles.css has no content."DiskCryptor". GitHub. 10 February 2022.
- ^ a b Page Module:Citation/CS1/styles.css has no content."DISK Protect Data Sheet" (PDF). Retrieved 2018-12-02.
- ^ Page Module:Citation/CS1/styles.css has no content."cryptsetup Frequently Asked Questions". Retrieved 2016-01-07.
- ^ a b Page Module:Citation/CS1/styles.css has no content."Multi level access with separate access credentials, each enabling a different set of functional or logical operations". EISST Ltd. Archived from the original on 2007-09-28. Retrieved 2007-07-25.
- ^ uses the lower filesystem (stacking)
- ^ a b Page Module:Citation/CS1/styles.css has no content."Intel Advanced Encryption Standard (AES) Instructions Set - Rev 3". Intel. Retrieved 2012-07-26.
- ^ a b c d e Page Module:Citation/CS1/styles.css has no content.Jacob Appelbaum, Ralf-Philipp Weinmann (2006-12-29). "Unlocking FileVault: An Analysis of Apple's disk encryption" (PDF). Retrieved 2012-01-03.
{{cite journal}}: Cite journal requires|journal=(help) - ^ a b Page Module:Citation/CS1/styles.css has no content."Mac OS X 10.7 Lion: the Ars Technica review". Ars Technica. 2011-07-20. Retrieved 2012-01-03.
- ^ FreeOTFE has a modular architecture and set of components to allow 3rd party integration
- ^ FreeOTFE allows multiple keys to mount the same container file via encrypted keyfiles
- ^ a b c d Page Module:Citation/CS1/styles.css has no content."FreeBSD Handbook: Encrypting Disk Partitions". Retrieved 2006-12-24.
- ^ a b c Page Module:Citation/CS1/styles.css has no content.Poul-Henning Kamp. "GBDE - GEOM Based Disk Encryption" (PDF). GBDE Design Document. Retrieved 2006-12-24.
- ^ a b Page Module:Citation/CS1/styles.css has no content."geli(8) man page in FreeBSD-current". GELI manual page in current FreeBSD. Retrieved 2006-12-24.
- ^ a b c d e f g h i j k Page Module:Citation/CS1/styles.css has no content.Jari Ruusu. "loop-AES README file". Archived from the original on 2023-08-23. Retrieved 2007-04-23.
- ^ Using customization
- ^ Page Module:Citation/CS1/styles.css has no content."McAfee Endpoint Encryption" (PDF). McAfee. Archived from the original (PDF) on 2010-12-17. Retrieved 2012-07-26.
- ^ n-Crypt Pro does not use password authentication— biometric/USB dongle authentication only
- ^ Page Module:Citation/CS1/styles.css has no content."PGP Whole Disk Encryption FAQ". PGP Corporation. Archived from the original on 2006-12-24. Retrieved 2006-12-24.
- ^ PGP private keys are always protected by strengthened passphrases
- ^ a b Page Module:Citation/CS1/styles.css has no content."Embedded Security: Trusted Platform Module Technology Comes of Age". Utimaco. Archived from the original on 2006-08-23. Retrieved 2008-03-04.
- ^ Page Module:Citation/CS1/styles.css has no content."ThinkVantage Technologies Deployment Guide" (PDF). Lenovo. Retrieved 2008-03-05.
- ^ a b For TrueCrypt containers
- ^ Page Module:Citation/CS1/styles.css has no content."SecureDoc Product Information". WinMagic Inc. Archived from the original on 2008-03-13. Retrieved 2008-03-05.
- ^ optional by using -K OpenBSD Manual Pages: vnconfig(8)
- ^ Page Module:Citation/CS1/styles.css has no content."Endpoint Encryption".
- ^ Page Module:Citation/CS1/styles.css has no content."Solutions for Solid-State Drives (SSD) - Endpoint Encryption". Archived from the original on 2014-11-29. Retrieved 2014-11-17.
- ^ Page Module:Citation/CS1/styles.css has no content."Support for smart card readers - Endpoint Encryption".
- ^ a b c Page Module:Citation/CS1/styles.css has no content."Operating Systems Supported for System Encryption". TrueCrypt Documentation. TrueCrypt Foundation. Retrieved 2014-05-28.
{{cite web}}: CS1 maint: deprecated archival service (link) - ^ Although each volume encrypted with TrueCrypt can only have one active master key, it is possible to access its contents through more than one header. Each header can have a different password and/or keyfiles if any (cf. TrueCrypt FAQ: Is there a way for an administrator to reset a volume password or pre-boot authentication password when a user forgets it (or loses a keyfile)?)
- ^ Page Module:Citation/CS1/styles.css has no content."Operating Systems Supported for System Encryption". VeraCrypt Documentation. IDRIX. Retrieved 2017-10-11.
- ^ Page Module:Citation/CS1/styles.css has no content."Whole Hard Disk Encryption Software - BestCrypt Volume Encryption - Jetico Inc. Oy". Archived from the original on 2009-08-29. Retrieved 2009-09-17.
- ^ Within a VHD http://www.howtogeek.com/193013/how-to-create-an-encrypted-container-file-with-bitlocker-on-windows/
- ^ dm-crypt can encrypt a file-based volume when used with the Page Template:Mono/styles.css has no content.losetup utility included with all major Linux distributions
- ^ yes, but the user needs custom scripts: http://www.linuxquestions.org/questions/slackware-14/luks-encryption-swap-and-hibernate-627958/
- ^ Uses proprietary e-Capsule file system not exposed to the OS.
- ^ a b not technically part of FileVault, but provided by many versions of Mac OS X; can be enabled independently of FileVault
- ^ http://macmarshal.com/images/Documents/mm_wp_102.pdf[permanent dead link]
- ^ Page Module:Citation/CS1/styles.css has no content."Use FileVault to encrypt the startup disk on your Mac".
- ^ a b File-based volume encryption is possible when used with Page Template:Mono/styles.css has no content.mdconfig(8) utility.
- ^ Page Module:Citation/CS1/styles.css has no content."Control Break International Debuts SafeBoot Version 4.27". September 2004. Archived from the original on 2015-04-02. Retrieved 2015-03-05.
- ^ http://www.openbsd.org/plus38.html OpenBSD 3.8 change notes
- ^ however, not Windows UEFI-based computers with a GUID partition table (GPT)
- ^ LRW_issue
- ^ Containers created with ArchiCrypt Live version 5 use LRW
- ^ Page Module:Citation/CS1/styles.css has no content."New features in BestCrypt version 8". Jetico. Archived from the original on 2007-02-04. Retrieved 2007-03-02.
- ^ Page Module:Citation/CS1/styles.css has no content."New features in version 2". Jetico. Archived from the original on 2008-09-05. Retrieved 2009-03-01.
- ^ a b Page Module:Citation/CS1/styles.css has no content.Niels Fergusson (August 2006). "AES-CBC + Elephant Diffuser: A Disk Encryption Algorithm for Windows Vista" (PDF). Microsoft. Retrieved 2008-02-22.
{{cite journal}}: Cite journal requires|journal=(help) - ^ Page Module:Citation/CS1/styles.css has no content."man 4 cgd in NetBSD-current". NetBSD current manual page on CGD. 2006-03-11. Retrieved 2006-12-24.
- ^ a b Containers created with TrueCrypt versions 1.0 through 4.0 use CBC.
- ^ a b Containers created with TrueCrypt versions 4.1 through 4.3a use LRW, and support CBC for opening legacy containers only.
- ^ Containers created with CipherShed or TrueCrypt versions 5.0+ use XTS, and support LRW/CBC for opening legacy containers only.
- ^ Page Module:Citation/CS1/styles.css has no content."CIBLE DE SECURITE CRITERES COMMUNS NIVEAU EAL3+" (PDF).
- ^ Starting with Linux kernel version 2.6.20, CryptoAPI supports the LRW mode: https://lwn.net/Articles/213650/
- ^ Page Module:Citation/CS1/styles.css has no content."cryptsetup - manage plain dm-crypt and LUKS encrypted volumes". 2018-01-01. Retrieved 2018-05-08.
- ^ Page Module:Citation/CS1/styles.css has no content."OS X Lion: About FileVault 2". Retrieved 2011-01-03.
- ^ Page Module:Citation/CS1/styles.css has no content."Linux/BSD disk encryption comparison". Archived from the original on 2007-06-29. Retrieved 2006-12-24.
- ^ Page Module:Citation/CS1/styles.css has no content.Pawel Jakub Dawidek (2006-06-08). "Data authentication for geli(8) committed to HEAD". Retrieved 2021-11-22.
- ^ For Scramdisk containers
- ^ For TrueCrypt 4 containers
- ^ For TrueCrypt 5 and 6 containers
- ^ Page Module:Citation/CS1/styles.css has no content."'CVS: cvs.openbsd.org: src' - MARC".
- ^ Containers created with TrueCrypt versions 5.0 or later use XTS, and support LRW/CBC for opening legacy containers only.
External links
- DiskCryptor vs Truecrypt – Comparison between DiskCryptor and TrueCrypt
- Buyer's Guide to Full Disk Encryption – Overview of full-disk encryption, how it works, and how it differs from file-level encryption