Comparison of disk encryption software
This is a technical feature comparison of different disk encryption software .
Operating systems
Name
Android
Windows NT
iOS
Mac OS X
Linux
FreeBSD
OpenBSD
NetBSD
Aloaha Crypt Disk
?
Yes
?
No
No
No
No
No
BestCrypt Volume Encryption
?
Yes
?
Yes
No[ 42]
No
No
No
BitArmor DataControl
?
Yes
?
No
No
No
No
No
BitLocker
No
Yes
?
Partial[ 43]
Partial[ 43]
No
No
No
Bloombase StoreSafe
?
Yes
?
Yes
Yes
Yes
Yes
Yes
Boxcryptor
Yes
Yes
Yes
Yes
Yes
No
No
No
CenterTools DriveLock
?
Yes
?
No
No
No
No
No
CGD
?
No
?
No
No
No
No
Yes
Check Point Full Disk Encryption
?
Yes
?
Yes
Yes[ 44]
No
No
No
CipherShed
Yes[ 45]
Yes
?
Yes
Yes
No[ 46]
No
No
CrossCrypt
No
Yes[ 47]
?
No
No
No
No
No
CryFS
No
Yes
?
Yes
Yes
Yes
No
Yes
Cryhod
?
Yes
?
No
Yes
No
No
No
Cryptainer
?
Yes
?
No
No
No
No
No
CryptArchiver
?
Yes
?
No
No
No
No
No
Cryptic Disk
No
Yes
No
No
No
No
No
No
Cryptoloop
?
Yes[ 48]
?
No
Yes
No
No
No
Cryptomator
Yes
Yes[ 49]
Yes
Yes
Yes
No
No
No
CryptoPro Secure Disk Enterprise
No
Yes
?
No
No
No
No
No
CryptoPro Secure Disk for BitLocker
No
Yes
?
No
No
No
No
No
Cryptsetup / Dmsetup
?
Yes[ 48]
?
No
Yes
No
No
No
CryptSync
No
Yes
?
Yes
Yes
No
No
No
Discryptor
?
No
?
No
No
No
No
No
DiskCryptor
?
Yes
?
No
No
No
No
No
DISK Protect
?
Yes
?
No
No
No
No
No
Dm-crypt / LUKS
?
Yes[ 48]
?
No
Yes
No
No
No
DriveSentry GoAnywhere 2
?
Yes
?
No
No
No
No
No
E4M
?
Yes
?
No
No
No
No
No
e-Capsule Private Safe
?
Yes
?
No
No
No
No
No
eCryptfs
?
No
?
No
Yes
No
No
No
EgoSecure HDD Encryption
?
Yes
?
No
No
No
No
No
EncFS
Yes[ 50]
Yes[ 51]
?
Yes[ 51]
Yes (FUSE)
Yes (FUSE )
Yes (FUSE)
Yes (FUSE)
EncryptStick
?
Yes
?
Yes
Yes
No
No
No
EncryptUSB
?
Yes
?
Yes
No
No
No
No
FileVault
?
No
?
Yes
No
No
No
No
FileVault 2
?
No
?
Yes
Partial[ 52]
No
No
No
FREE CompuSec
?
Yes
?
No
No
No
No
No
FreeOTFE
No
Yes
?
No
Partial[ 53]
No
No
No
GBDE
?
No
?
No
No
Yes
No
No
GELI
?
No
?
No
No
Yes
No
No
Knox
?
No
?
Yes
No
No
No
No
LibreCrypt
Yes[ 54]
Yes
?
No
Partial[ 55]
No
No
No
Loop-AES
?
No
?
No
Yes
No
No
No
McAfee Drive Encryption (SafeBoot)
?
Yes
?
Yes
No
No
No
No
n-Crypt Pro
?
Yes
?
No
No
No
No
No
PGPDisk
?
Yes
?
Yes
No
No
No
No
PGP Whole Disk Encryption
?
Yes
?
Yes
Yes
No
No
No
Private Disk
?
Yes
?
No
No
No
No
No
ProxyCrypt
No
Yes
?
No
No
No
No
No
R-Crypto
?
Yes
?
No
No
No
No
No
SafeGuard Easy
?
Yes
?
No
No
No
No
No
SafeGuard Enterprise
?
Yes
?
Yes
No
No
No
No
SafeGuard PrivateDisk
?
Yes
?
No
No
No
No
No
SafeHouse Professional
?
Yes
?
No
No
No
No
No
Scramdisk
?
Yes
?
No
Yes
No
No
No
Scramdisk 4 Linux
?
No
?
No
Yes
No
No
No
SecuBox
?
No
?
No
No
No
No
No
SecureDoc
?
Yes
?
Yes
Yes
No
No
No
Sentry 2020
?
Yes
?
No
No
No
No
No
Seqrite Volume Encryption
No
Yes
No
No
No
No
No
No
Softraid / RAID C
?
No
?
No
No
No
Yes
No
SpyProof!
?
Yes
?
No
No
No
No
No
Svnd / Vnconfig
?
No
?
No
No
No
Yes
No
Symantec Endpoint Encryption
?
Yes
?
Yes
No[ 56]
No
No
No
Tcplay
No
No
?
No
Yes
No
No
No
Trend Micro Endpoint Encryption
No
Yes
?
Yes
No
No
No
No
TrueCrypt
Yes[ 45]
Yes
Yes
Yes
Yes
No[ 57]
No
No
USBCrypt
No
Yes
?
No
No
No
No
No
VeraCrypt
Yes[ 58]
Yes
Yes[ 59]
Yes
Yes
Yes
No
No
CyberSafe Top Secret
Yes
Yes
?
No
No
No
No
No
Name
Android
Windows NT
iOS
Mac OS X
Linux
FreeBSD
OpenBSD
NetBSD
Features
Name
Hidden containers
Pre-boot authentication
Single sign-on
Custom authentication
Multiple keys
Passphrase strengthening
Hardware acceleration
TPM
Filesystems
Two-factor authentication
Aloaha Secure Stick
Yes
No
—
Yes
Yes
No
No
No
NTFS, FAT32
Yes
ArchiCrypt Live
Yes[ 61]
No
—
No
Yes[ 61] [ 62]
No
No
No
?
Yes[ 61] [ 63]
BestCrypt
Yes
Yes
Yes
Yes
Yes[ 64]
Yes
Yes
Yes
Any supported by OS
Yes[ 65]
BitArmor DataControl
No
Yes
?
No
Yes
Yes
No
No
NTFS, FAT32 on non-system volumes
No
BitLocker
No
Yes[ 66]
No
Yes[ 67]
Yes[ 68]
Yes[ 69]
Yes
Yes[ 68]
Chiefly NTFS [ Note 1]
Yes [ Note 2]
Bloombase StoreSafe
No
No
—
Yes
Yes
Yes
Yes
No
Any supported by OS
Yes
CGD
No
No
—
Yes[ 70]
Yes[ 71]
Yes[ 70]
No
No
Any supported by OS
Yes[ 70]
CenterTools DriveLock
No
Yes
Yes
No
No
Yes
No
No
Any supported by OS
Yes
Check Point Full Disk Encryption
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
NTFS, FAT32
Yes
CipherShed
Yes (limited to one per "outer" container)
only on Windows[ 72]
?
No
yes with multiple keyfiles[ 73] [ 74]
Yes
Yes
No[ 75]
Only Windows MBR volumes; no UEFI GPT drives, and dynamic drives discouraged[ 76]
Yes
CryFS
No
No
—
No
No
Yes[ 77]
No
No
Any supported by OS
No
CrossCrypt
No
No
—
No
No
No
No
No
?
No
CryptArchiver
No
No
—
No
No
?
No
No
?
?
Cryptic Disk
Yes
No
No
No
Yes
Yes
Yes
No
Any supported by OS
Yes
Cryhod
No
Yes
Yes
No
Yes
Yes
Yes
No
Any supported by OS
Yes
Cryptoloop
No
Yes[ 78]
?
Yes
No
No
Yes[citation needed ]
No
Any supported by OS
?
Cryptomator
No
No
—
No
No
Yes
Yes
No
Any supported by OS
No
CryptoPro Secure Disk Enterprise
Yes with add-on Secure Device
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Any supported by OS
Yes
CryptoPro Secure Disk for BitLocker
Yes with add-on Secure Device
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Any supported by OS
Yes
Cryptsetup / Dmsetup
No
Yes[ 78]
?
Yes
No
No
Yes
No
Any supported by OS
Yes
DiskCryptor
No
Yes
?
No
No
No
Yes[ 79]
No
Windows volumes on MBR and UEFI GPT drives, ReFs any FS supported by OS[ 80]
Yes[ 79]
DISK Protect
No
Yes[ 81]
Yes
No
Yes[ 81]
No
Yes
Yes
NTFS, FAT32
Yes
Dm-crypt / LUKS
No
Yes[ 78]
?
Yes
Yes
Yes
Yes
Partial[ 82] [ Note 3]
Any supported by OS
Yes
DriveSentry GoAnywhere 2
No
No
—
Yes
No
Yes
No
?
Any supported by OS
Yes
E4M
No
No
—
No
No
?
No
No
?
No
e-Capsule Private Safe
Yes[ 83]
No
—
No
Yes[ 83]
No
Yes
No
?
?
eCryptfs
No
No
—
Yes
Yes
Yes
Yes
Yes
Yes[ 84]
Yes
EgoSecure HDD Encryption
No
Yes
Yes
Yes
Yes
Yes
Yes[ 85]
Yes
NTFS, FAT32
Yes
EncryptUSB
No
No
No
No
No
Yes
No
No
NTFS, FAT32, exFAT
No
FileVault
No
No
—
No
Two passwords[ 86]
Yes[ 86]
?
No
HFS+, possibly others
No
FileVault 2
No
Yes
Yes
No
Yes
Yes
Yes[ 87]
No
HFS+, possibly others
No
FREE CompuSec
No
Yes
?
No
No
No
No
No
Any supported by OS
No
FreeOTFE
Yes
No
—
Yes[ 88]
Yes[ 89]
Yes
Yes
No
Any supported by OS
Yes
GBDE
No
No[ 90]
—
Yes
Yes[ 91]
No[ 91]
No[ 90]
No
Any supported by OS
Yes
GELI
No
Yes[ 90]
?
Yes
Yes[ 92]
Yes[ 92]
Yes[ 90]
No
Any supported by OS
Yes
Loop-AES
No
Yes[ 93]
?
Yes[ 93]
Yes[ 93]
Yes[ 93]
Yes[ 93]
No
Any supported by OS
Yes[ 94]
McAfee Drive Encryption (SafeBoot)
Yes
Yes
Yes
Yes
Yes
Yes
Yes[ 85] [ 95]
Yes
Any supported by OS
Yes
n-Crypt Pro
No
No
—
No
No
—[ 96]
No
No
?
?
PGPDisk
No
Yes[ 97]
Yes
?
Yes
Yes[ 98]
?
Yes
?
Yes
Private Disk
No
No
—
No
Yes
Yes
No
No
Any supported by OS
Yes
ProxyCrypt
Yes
No
No
No
No
Yes
Yes
No
Any supported by OS
Yes
R-Crypto
?
No
—
?
?
?
?
?
Any supported by OS
?
SafeGuard Easy
No
Yes
?
No
Yes
Yes
No
Yes[ 99]
Any supported by OS
Yes
SafeGuard Enterprise
No
Yes
Yes
No
Yes
Yes
No
Yes[ 99]
Any supported by OS
Yes
SafeGuard PrivateDisk
No
No
—
No
Yes
Yes
No
Yes[ 100]
Any supported by OS
Yes
SafeHouse Professional
No
No
—
Yes
Yes
Yes
No
No
Any supported by OS
Yes
Scramdisk
Yes
No
—
No
No
No
No
No
?
Last update to web site 2009-07-02
Scramdisk 4 Linux
Yes[ 101]
No
—
No
No
Yes[ 101]
No
No
ext2, ext3, reiserfs, minix, ntfs, vfat/msdos
No
SecuBox
No
No
—
No
No
Yes
No
No
?
No
SecureDoc
No
Yes[ 102]
?
Yes
Yes
Yes
Yes
Yes
?
Yes
Seqrite Encryption Manager
No
Yes
Yes
No
Yes
Yes
Yes
No
Any supported by OS
No
Sentry 2020
No
No
?
No
No
No
No
No
?
No
Softraid / RAID C
No
No
?
?
?
?
Yes
?
Any supported by OS
?
Svnd / Vnconfig
No
No
—
No
No
Yes[ 103]
Yes
?
Any supported by OS
?
Symantec Endpoint Encryption
No
Yes
Yes
Yes
Yes
Yes
No
No
NTFS, FAT32
Yes
Trend Micro Endpoint Encryption
No
Yes
Yes
Yes
Yes
Yes[ 104]
Yes[ 105]
No
Any supported by OS
Yes[ 106]
TrueCrypt [ Note 4]
Yes (limited to one per "outer" container)
only on Windows[ 107]
?
No
yes with multiple keyfiles[ 74] [ 108]
Yes
Yes
No[ 75]
Only Windows MBR volumes; no UEFI GPT drives, and dynamic drives discouraged[ 76]
Yes
VeraCrypt
Yes (limited to one per "outer" container)
only on Windows[ 109]
No
No
yes with multiple keyfiles
Yes
Yes
No
Windows on both MBR and UEFI GPT drives; dynamic drives discouraged
Yes
CyberSafe Top Secret
Yes
No
No
No
Yes
Yes
Yes
No
Only Windows MBR volumes; no UEFI GPT drives, and dynamic drives discouraged
Yes
Name
Hidden containers
Pre-boot authentication
Single sign-on
Custom authentication
Multiple keys
Passphrase strengthening
Hardware acceleration
TPM
Filesystems
Two-factor authentication
ZzEnc
No
Yes
Yes
Yes
Yes
Yes
No
No
Windows, Legacy BIOS & UEFI
In UEFI with removable keys store on USB-flash
^ Windows 7 introduces Bitlocker-To-Go which supports NTFS, FAT32 or exFAT, however for hard drive encryption, Windows Vista and later are limited to be installable only on NTFS volumes
^ BitLocker can be used with a TPM PIN + external USB key for two-factor authentication
^ An external tool can be used to read the key from the TPM and then have the key passed on to dm-crypt/LUKS via the standard input
^ The current situation around TrueCrypt project is controversial. On 28.05.2014 after many years of development and broad usage the open-source (although anonymous) project was suddenly stopped, and all previous official materials and complete (encrypt/decrypt) binaries were withdrawn from its website citing some "unfixed security issues" and Windows XP end of support. The technical information herein is valid only for previous versions of TrueCrypt (v7.1a and some earlier). The latest available version (v7.2) is decrypt only, its authenticity and actual reasons behind the move are unclear, and its usage is not recommended. https://www.zdnet.com/article/truecrypt-quits-inexplicable/
Layering
Whole disk : Whether the whole physical disk or logical volume can be encrypted, including the partition tables and master boot record. Note that this does not imply that the encrypted disk can be used as the boot disk itself; refer to pre-boot authentication in the features comparison table.
Partition : Whether individual disk partitions can be encrypted.
File : Whether the encrypted container can be stored in a file (usually implemented as encrypted loop devices ).
Swap space : Whether the swap space (called a "pagefile" on Windows) can be encrypted individually/explicitly.
Hibernation file : Whether the hibernation file is encrypted (if hibernation is supported).
Name
Whole disk
Partition
File
Swap space
Hibernation file
RAID
Aloaha Secure Stick
No
No
Yes
No
No
?
ArchiCrypt Live
Yes (except for the boot volume)
Yes
Yes
No
No
?
BestCrypt
Yes
Yes
Yes
Yes
Yes[ 110]
?
BitArmor DataControl
No
Yes
No
Yes
Yes
?
BitLocker
Yes (except for the boot volume)
Yes
Yes[ 111]
Yes (parent volume is encrypted)
Yes (parent volume is encrypted)
?
Bloombase StoreSafe
Yes
Yes
Yes
Yes
No
Yes
CenterTools DriveLock
Yes
Yes
Yes
Yes
Yes
?
CGD
Yes
Yes
Yes[ 70]
Yes
No
?
Check Point Full Disk Encryption
Yes
Yes
Yes
Yes
Yes
?
CipherShed
Yes
Yes
Yes
Yes
only on Windows
?
CrossCrypt
No
No
Yes
No
No
?
CryFS
No
No
No
No
No
?
CryptArchiver
No
No
Yes
No
No
?
Cryptic Disk
No
Yes
Yes
No
No
?
Cryhod
No
Yes
No
Yes
Yes (parent volume is encrypted)
?
Cryptoloop
Yes
Yes
Yes
Yes
No
?
Cryptomill
Yes
—
Yes
—
—
?
CryptoPro Secure Disk Enterprise
Yes
Yes
Yes (add-on Secure Device)
Yes
Yes
?
CryptoPro Secure Disk for BitLocker
Yes
Yes
Yes
Yes
Yes
?
DiskCryptor
No
Yes
No
Yes
Yes
?
Disk Protect
Yes
No
No
Yes
Yes
?
Dm-crypt / LUKS
Yes
Yes
Yes[ 112]
Yes
Yes[ 113]
?
DriveSentry GoAnywhere 2
No
Yes
Yes
No
No
?
E4M
No
Yes
Yes
No
No
?
e-Capsule Private Safe
No
No
Yes[ 114]
No
No
?
eCryptfs
No
No
Yes
No
No
?
EgoSecure HDD Encryption
Yes
Yes
Yes
Yes
Yes
?
EncryptUSB
No
No
Yes
No
No
?
FileVault
No
No
Yes[ 86]
Yes[ 115] [ 86]
Yes[ 115] [ 116]
FileVault 2
Yes[ 117]
Yes[ 87]
No
Yes
Yes
?
FREE CompuSec
Yes
No
Yes
Yes
Yes
?
FreeOTFE
Yes (except for the boot volume)
Yes
Yes
No
No
?
GBDE
Yes
Yes
Yes[ 118]
Yes
No
?
GELI
Yes
Yes
Yes[ 118]
Yes
No
?
Loop-AES
Yes
Yes[ 93]
Yes[ 93]
Yes[ 93]
Yes[ 93]
?
McAfee Drive Encryption (SafeBoot)
Yes
Yes
Yes
Yes
Yes[ 119]
?
n-Crypt Pro
Yes
Yes
Yes
No
No
?
PGPDisk
Yes
Yes
Yes
Yes
only on Windows
?
Private Disk
No
No
Yes
No
No
?
ProxyCrypt
Yes
Yes
Yes
No
No
?
R-Crypto
No
No
Yes
No
No
?
SafeGuard Easy
Yes
Yes
extra module
Yes
Each sector on disk is encrypted
?
SafeGuard Enterprise
Yes
Yes
Yes
Yes
Each sector on disk is encrypted
?
SafeGuard PrivateDisk
No
No
Yes
No
No
?
SafeHouse Professional
No
No
Yes
No
No
?
Scramdisk
No
Yes
Yes
No
No
?
Scramdisk 4 Linux
Yes
Yes
Yes
Yes
No
?
SecuBox
No
No
Yes
—
No
?
Sentry 2020
No
No
Yes
No
No
?
Seqrite Encryption Manager
Yes
Yes
Yes
Yes
Yes
RAID-5
Softraid / RAID C
Yes
Yes
No
Yes (encrypted by default in OpenBSD)[ 120]
No
?
Svnd / Vnconfig
?
Yes
Yes
Yes (encrypted by default in OpenBSD)
?
?
SpyProof!
No
Yes
Yes
No
No
?
Symantec Endpoint Encryption
Yes
Yes
Yes
Yes
Yes
?
Trend Micro Endpoint Encryption
Yes
Yes
Yes
Yes
Yes
?
TrueCrypt
Yes[ 121]
Yes
Yes
Yes
only on Windows[ 107]
?
VeraCrypt
Yes
Yes
Yes
Yes
only on Windows[ 107]
?
CyberSafe Top Secret
No
Yes
Yes
No
No
?
Name
Whole disk
Partition
File
Swap space
Hibernation file
RAID
Modes of operation
Different modes of operation supported by the software. Note that an encrypted volume can only use one mode of operation.
CBC with predictable IVs : The CBC (cipher block chaining ) mode where initialization vectors are statically derived from the sector number and are not secret; this means that IVs are re-used when overwriting a sector and the vectors can easily be guessed by an attacker, leading to watermarking attacks .
CBC with secret IVs : The CBC mode where initialization vectors are statically derived from the encryption key and sector number. The IVs are secret, but they are re-used with overwrites. Methods for this include ESSIV and encrypted sector numbers (CGD).
CBC with random per-sector keys : The CBC mode where random keys are generated for each sector when it is written to, thus does not exhibit the typical weaknesses of CBC with re-used initialization vectors. The individual sector keys are stored on disk and encrypted with a master key. (See GBDE for details)
LRW : The Liskov-Rivest-Wagner tweakable narrow-block mode, a mode of operation specifically designed for disk encryption. Superseded by the more secure XTS mode due to security concerns.[ 122]
XTS : XEX-based Tweaked CodeBook mode (TCB) with CipherText Stealing (CTS), the SISWG (IEEE P1619) standard for disk encryption.
Authenticated encryption : Protection against ciphertext modification by an attacker
Name
CBC w/ predictable IVs
CBC w/ secret IVs
CBC w/ random per-sector keys
LRW
XTS
Authenticated encryption
Aloaha Crypt Disk
No
No
No
Yes
Yes
?
ArchiCrypt Live
No
No
No
Legacy support[ 123]
Yes
?
BestCrypt
No
Yes
No
Yes[ 124]
Yes[ 125]
?
BitArmor DataControl
No
Yes
Plumb-IV
No
No
?
BitLocker
No[ 126]
Yes[ 126]
No
No
Yes, Windows 10 10547+
?
Bloombase StoreSafe
Yes
Yes
Yes
Yes
Yes
?
CGD
No
Yes[ 127]
No
No
No
?
CenterTools DriveLock
?
?
?
?
?
?
Check Point Full Disk Encryption
No
No
Yes
Yes
Yes
?
CipherShed
Legacy support[ 128]
No
No
Legacy support[ 129]
Yes[ 130]
?
CrossCrypt
Yes
No
No
No
No
?
CryFS
No
No
Yes
No
No
?
CryptArchiver
?
?
?
?
?
?
Cryptic Disk
No
No
No
No
Yes
No
Cryhod
No
Yes
No
No
Yes[ 131]
?
Cryptoloop
Yes
No
No
No
No
No
DiskCryptor
No
No
No
No
Yes
?
Dm-crypt / LUKS
Yes
Yes
No
Yes, using *-lrw-benbi[ 132]
Yes, using *-xts-plain
Yes, using --integrity
mode[ 133]
DriveSentry GoAnywhere 2
?
?
?
?
?
?
E4M
?
?
?
No
No
?
e-Capsule Private Safe
?
?
?
?
?
?
eCryptfs
No
Yes
?
No
No
?
EgoSecure HDD Encryption
No
Yes
No
No
No
?
FileVault
Yes[ 86]
No
No
No
No
?
FileVault 2
No
No
No
No
Yes[ 134]
?
FREE CompuSec
Yes
No
No
No
No
?
FreeOTFE
Yes
Yes
No
Yes
Yes
No
GBDE
No
No
Yes[ 91]
No
No
?
GELI
No
Yes[ 135]
No
No
Yes
Yes, using -a
option[ 136]
Loop-AES
single-key, multi-key-v2 modes[ 93]
multi-key-v3 mode[ 93]
No
No
No
No
McAfee Drive Encryption (SafeBoot)
No
Yes
No
No
No
?
n-Crypt Pro
?
?
No
No
No
?
PGPDisk
?
?
?
?
?
?
Private Disk
No
Yes
No
No
No
?
ProxyCrypt
No
No
No
No
Yes
?
R-Crypto
?
?
?
?
?
?
SafeGuard Easy
?
?
?
?
?
?
SafeGuard Enterprise
?
?
?
?
?
?
SafeGuard PrivateDisk
?
?
?
?
?
?
SafeHouse Professional
Yes
No
No
No
No
?
Scramdisk
No
Yes
No
No
No
?
Scramdisk 4 Linux
No
Yes[ 137]
No
Yes[ 138]
Yes[ 139]
?
SecuBox
Yes
No
No
No
No
?
SecureDoc
?
?
?
?
?
?
Sentry 2020
?
?
?
?
?
?
Seqrite Encryption Manager
No
Yes
No
Yes
Yes
?
Softraid / RAID C
?
?
?
?
Yes[ 140]
?
Svnd / Vnconfig
?
?
?
?
?
?
Symantec Endpoint Encryption
No
No
Yes
No
No
?
TrueCrypt
Legacy support[ 128]
No
No
Legacy support[ 129]
Yes[ 141]
No
USBCrypt
No
Yes
No
No
Yes
?
VeraCrypt
No
No
No
No
Yes
?
CyberSafe Top Secret
No
No
No
No
Yes
?
Name
CBC w/ predictable IVs
CBC w/ secret IVs
CBC w/ random per-sector keys
LRW
XTS
Authenticated encryption
See also
Notes and references
^ "Jetico Mission" . Jetico. Retrieved 2014-05-30 .
^ "Bloombase StoreSafe" . Bloombase. Retrieved 2014-11-28 .
^ Roland Dowdeswell (2002-10-04). "CryptoGraphic Disk" . mailing list announcement . Retrieved 2007-01-14 .
^ "Protect guards laptop and desktop data" . Archived from the original on March 2, 2005. Retrieved 2008-09-03 .
^ Company and product name change to Pointsec "Protect Data Security Inc. changes name to Pointsec Mobile Technologies Inc" . Archived from the original on 2004-08-20. Retrieved 2008-09-03 .
^ "Check Point Completes the Offer for Protect Data with Substantial Acceptance of 87.1 Percent" . Archived from the original on 2008-08-20. Retrieved 2008-09-03 .
^ Niklas Lemcke (2014-12-15). "Pre-Alpha testing started" . Retrieved 2014-12-24 .
^ "TrueCrypt License Version 3.0" . TrueCrypt Foundation. 2012-02-07. Retrieved 2014-12-24 .
^ Sarah Dean (2004-02-10). "OTFEDB entry" . Archived from the original on 2008-12-11. Retrieved 2008-08-10 .
^ Initial cryptoloop patches for the Linux 2.5 development kernel: "Archived copy" . Archived from the original on 2005-01-10. Retrieved 2006-12-24 .{{cite web }}
: CS1 maint: archived copy as title (link )
^ "Home" . cryptomator.org .
^ "Releases · DavidXanatos/DiskCryptor" . GitHub .
^ dm-crypt was first included in Linux kernel version 2.6.4: https://lwn.net/Articles/75404/
^ Clemens Fruhwirth. "LUKS version history" . Archived from the original on 2006-12-25. Retrieved 2006-12-24 .
^ "archived E4M documentation" . Archived from the original on 2000-05-24.
^ "eCryptfs" . Retrieved 2008-04-29 .
^ Valient Gough (2003). "EncFS - an Encrypted Filesystem" . README.md file . Retrieved 2007-01-14 .
^ "FreeOTFE version history" . Archived from the original on 2006-12-07. Retrieved 2006-12-24 .
^ "gbde(4) man page in FreeBSD 4.11" . GBDE manual page as it appeared in FreeBSD 4.11 . Retrieved 2006-12-24 .
^ "geli(8) man page in FreeBSD 6.0" . GELI manual page as it first appeared in FreeBSD 6.0 . Retrieved 2006-12-24 .
^ Release Notes. GnuPG
^ "gocryptfs changelog on github" . GitHub . Retrieved 2018-01-16 .
^ "as received from FreeOTFE version v5.21 with small changes" . GitHub . 2014-06-20. Retrieved 2015-09-14 .
^ "McAfee Drive Encryption" . product description . McAfee. Retrieved 2019-07-31 .
^ "PGP 6.0 Freeware released- any int'l links?" . Newsgroup : comp.security.pgp . Usenet: 6sh4vm$jbf$1@news.cybercity.dk . Retrieved 2007-01-04 .
^ "Dekart Encryption software timeline" . Dekart.
^ "SafeGuard Easy 4.5 Technical Whitepaper" (PDF) . Utimaco. Retrieved 2009-08-10 .
^ "SafeGuard Enterprise Technical Whitepaper" (PDF) . Utimaco. Retrieved 2009-08-10 .
^ Rebranded as ThinkVantage Client Security "ThinkVantage Technologies Deployment Guide" (PDF) . Lenovo . Retrieved 2008-03-05 .[dead link ]
^ "ScramDisk 4 Linux Releases" .
^ "Sentry 2020 news" . Retrieved 2007-01-02 .
^ "OpenBSD 4.2 Changelog" .
^ "OpenBSD 2.8 Changelog" .
^ "bwalex/tc-play" . GitHub . 2019-08-27.
^ Last update: 2020-03-02 "bwalex/tc-play" . Github. 2023-04-03.
^ Trend Micro
^ "Mobile Armor: Your Data.Secure. Everywhere" . 4 September 2004. Archived from the original on 4 September 2004.
^ "TrueCrypt" .
^ "TrueCrypt License Version 3.1" . TrueCrypt Foundation. 2014-05-28. Retrieved 2014-05-29 .
^ "VeraCrypt" .
^ "Apache License 2.0" . IDRIX. 2015-06-28. Archived from the original on 2015-07-09. Retrieved 2015-08-08 .
^ "Whole Hard Disk Encryption Software - BestCrypt Volume Encryption - Jetico Inc. Oy" .
^ a b https://github.com/Aorimn/dislocker FUSE driver to read/write Windows BitLocker-ed volumes under Linux / Mac OSX
^ "Archived copy" (PDF) . Archived from the original (PDF) on 2015-09-23. Retrieved 2014-12-14 .{{cite web }}
: CS1 maint: archived copy as title (link )
^ a b https://play.google.com/store/apps/details?id=com.sovworks.edslite Third party app allows to open containers encryptes with AES-256, SHA-512 hash and FAT file system
^ http://www.truecrypt.org/misc/freebsd Although CipherShed can be built under FreeBSD, it is not recommended to run it because of bugs and instabilities when CipherShed is attempted to be used
^ CrossCrypt - Only for the Microsoft Windows XP/2000 operating systems
^ a b c http://www.freeotfe.org/docs/Main/Linux_volumes.htm FreeOTFE supports cryptoloop, dm-crypt/cryptsetup /dmsetup , and dm-crypt/LUKS volumes
^ "Cryptomator - Free Cloud Encryption" .
^ "Boxcryptor - Encryption for cloud storage - Window, Mac, Android, iOS" .
^ a b "Safe - Protect Your Files" . Archived from the original on 2016-04-21. Retrieved 2016-03-29 .
^ https://code.google.com/p/libfvde/ libfvde supports reading FileVault2 Drive Encryption (FVDE) encrypted volumes
^ http://www.freeotfe.org/docs/Main/Linux_volumes.htm Supports Linux volumes
^ https://play.google.com/store/apps/details?id=com.nemesis2.luksmanager&hl=en_GB Third party app allows a user to open LibreCrypt compatible LUKS containers
^ https://github.com/t-d-k/LibreCrypt/blob/master/docs/Linux_volumes.md Supports Linux volumes
^ "Endpoint Encryption Powered by PGP Technology - Symantec" .
^ http://www.truecrypt.org/misc/freebsd Although TrueCrypt can be built under FreeBSD, it is not recommended to run it because of bugs and instabilities when TrueCrypt is attempted to be used
^ https://play.google.com/store/apps/details?id=com.sovworks.eds.android Third party app allows to encrypt and decrypt VeraCrypt containers (only available in the paid version)
^ https://apps.apple.com/de/app/disk-decipher/id516538625 Third party app allows to encrypt and decrypt VeraCrypt containers (only available in the paid version)
^ http://www.jetico.com/linux/bcrypt-help/c_hiddn.htm Hidden containers description from Jetico (BestCrypt)
^ a b c Secret-containers and Camouflage files ArchiCrypt Live Description Archived 2011-08-24 at the Wayback Machine
^ Supports "Guest" keys
^ Using "Archicrypt Card"
^ Supported by the BestCrypt container format; see BestCrypt SDK
^ Supported by the BestCrypt Volume Encryption software
^ With PIN or USB key
^ BitLocker Drive Encryption: Value Add Extensibility Options
^ a b "BitLocker Drive Encryption Technical Overview" . Microsoft . Archived from the original on 2008-02-24. Retrieved 2008-03-13 .
^ Recovery keys only.
^ a b c d Roland C. Dowdeswell, John Ioannidis. "The CryptoGraphic Disk Driver" (PDF) . CGD Design Paper . Retrieved 2006-12-24 .
^ Federico Biancuzzi (2005-12-21). "Inside NetBSD's CGD" . interview with Roland Dowdeswell . ONLamp.com. Archived from the original on 2007-09-29. Retrieved 2006-12-24 .
^ "Operating Systems Supported for System Encryption" (PDF) . CipherShed Documentation . CipherShed Project. Retrieved 2014-12-27 .
^ Although each volume encrypted with CipherShed can only have one active master key, it is possible to access its contents through more than one header. Each header can have a different password and/or keyfiles if any (cf. TrueCrypt FAQ: Is there a way for an administrator to reset a volume password or pre-boot authentication password when a user forgets it (or loses a keyfile)? )
^ a b "Keyfiles" . TrueCrypt Documentation . TrueCrypt Foundation. Retrieved 2014-05-28 .
^ a b "Some encryption programs use TPM to prevent attacks. Will TrueCrypt use it too?" . TrueCrypt FAQ . TrueCrypt Foundation. Archived from the original on 2013-04-16. Retrieved 2014-05-28 .
^ a b "Future" . TrueCrypt Foundation. Retrieved 2014-05-24 .[permanent dead link ]
^ "CryFS: How it works" . Retrieved 2016-09-23 .
^ a b c dm-crypt and cryptoloop volumes can be mounted from the initrd before the system is booted
^ a b "DiskCryptor Features" . Archived from the original on 2010-05-29. Retrieved 2010-05-25 .
^ "DiskCryptor" . GitHub . 10 February 2022.
^ a b "DISK Protect Data Sheet" (PDF) . Retrieved 2018-12-02 .
^ "cryptsetup Frequently Asked Questions" . Retrieved 2016-01-07 .
^ a b "Multi level access with separate access credentials, each enabling a different set of functional or logical operations" . EISST Ltd. Archived from the original on 2007-09-28. Retrieved 2007-07-25 .
^ uses the lower filesystem (stacking)
^ a b "Intel Advanced Encryption Standard (AES) Instructions Set - Rev 3" . Intel. Retrieved 2012-07-26 .
^ a b c d e Jacob Appelbaum, Ralf-Philipp Weinmann (2006-12-29). "Unlocking FileVault: An Analysis of Apple's disk encryption" (PDF) . Retrieved 2012-01-03 .
^ a b "Mac OS X 10.7 Lion: the Ars Technica review" . Ars Technica . 2011-07-20. Retrieved 2012-01-03 .
^ FreeOTFE has a modular architecture and set of components to allow 3rd party integration
^ FreeOTFE allows multiple keys to mount the same container file via encrypted keyfiles
^ a b c d "FreeBSD Handbook: Encrypting Disk Partitions" . Retrieved 2006-12-24 .
^ a b c Poul-Henning Kamp . "GBDE - GEOM Based Disk Encryption" (PDF) . GBDE Design Document . Retrieved 2006-12-24 .
^ a b "geli(8) man page in FreeBSD-current" . GELI manual page in current FreeBSD . Retrieved 2006-12-24 .
^ a b c d e f g h i j k Jari Ruusu. "loop-AES README file" . Archived from the original on 2023-08-23. Retrieved 2007-04-23 .
^ Using customization
^ "McAfee Endpoint Encryption" (PDF) . McAfee. Archived from the original (PDF) on 2010-12-17. Retrieved 2012-07-26 .
^ n-Crypt Pro does not use password authentication— biometric/USB dongle authentication only
^ "PGP Whole Disk Encryption FAQ" . PGP Corporation. Archived from the original on 2006-12-24. Retrieved 2006-12-24 .
^ PGP private keys are always protected by strengthened passphrases
^ a b "Embedded Security: Trusted Platform Module Technology Comes of Age" . Utimaco. Archived from the original on 2006-08-23. Retrieved 2008-03-04 .
^ "ThinkVantage Technologies Deployment Guide" (PDF) . Lenovo . Retrieved 2008-03-05 .
^ a b For TrueCrypt containers
^ "SecureDoc Product Information" . WinMagic Inc. Archived from the original on 2008-03-13. Retrieved 2008-03-05 .
^ optional by using -K OpenBSD Manual Pages: vnconfig(8)
^ "Endpoint Encryption" .
^ "Solutions for Solid-State Drives (SSD) - Endpoint Encryption" . Archived from the original on 2014-11-29. Retrieved 2014-11-17 .
^ "Support for smart card readers - Endpoint Encryption" .
^ a b c "Operating Systems Supported for System Encryption" . TrueCrypt Documentation . TrueCrypt Foundation. Archived from the original on 2013-01-08. Retrieved 2014-05-28 .
^ Although each volume encrypted with TrueCrypt can only have one active master key, it is possible to access its contents through more than one header. Each header can have a different password and/or keyfiles if any (cf. TrueCrypt FAQ: Is there a way for an administrator to reset a volume password or pre-boot authentication password when a user forgets it (or loses a keyfile)? )
^ "Operating Systems Supported for System Encryption" . VeraCrypt Documentation . IDRIX. Retrieved 2017-10-11 .
^ "Whole Hard Disk Encryption Software - BestCrypt Volume Encryption - Jetico Inc. Oy" . Archived from the original on 2009-08-29. Retrieved 2009-09-17 .
^ Within a VHD http://www.howtogeek.com/193013/how-to-create-an-encrypted-container-file-with-bitlocker-on-windows/
^ dm-crypt can encrypt a file-based volume when used with the losetup utility included with all major Linux distributions
^ yes, but the user needs custom scripts: http://www.linuxquestions.org/questions/slackware-14/luks-encryption-swap-and-hibernate-627958/
^ Uses proprietary e-Capsule file system not exposed to the OS.
^ a b not technically part of FileVault, but provided by many versions of Mac OS X; can be enabled independently of FileVault
^ http://macmarshal.com/images/Documents/mm_wp_102.pdf [permanent dead link ]
^ "Use FileVault to encrypt the startup disk on your Mac" .
^ a b File-based volume encryption is possible when used with mdconfig(8) utility.
^ "Control Break International Debuts SafeBoot Version 4.27" . September 2004. Archived from the original on 2015-04-02. Retrieved 2015-03-05 .
^ http://www.openbsd.org/plus38.html OpenBSD 3.8 change notes
^ however, not Windows UEFI-based computers with a GUID partition table (GPT)
^ LRW_issue
^ Containers created with ArchiCrypt Live version 5 use LRW
^ "New features in BestCrypt version 8" . Jetico. Archived from the original on 2007-02-04. Retrieved 2007-03-02 .
^ "New features in version 2" . Jetico. Archived from the original on 2008-09-05. Retrieved 2009-03-01 .
^ a b Niels Fergusson (August 2006). "AES-CBC + Elephant Diffuser: A Disk Encryption Algorithm for Windows Vista" (PDF) . Microsoft . Retrieved 2008-02-22 .
^ "man 4 cgd in NetBSD-current" . NetBSD current manual page on CGD . 2006-03-11. Retrieved 2006-12-24 .
^ a b Containers created with TrueCrypt versions 1.0 through 4.0 use CBC.
^ a b Containers created with TrueCrypt versions 4.1 through 4.3a use LRW, and support CBC for opening legacy containers only.
^ Containers created with CipherShed or TrueCrypt versions 5.0+ use XTS, and support LRW/CBC for opening legacy containers only.
^ "CIBLE DE SECURITE CRITERES COMMUNS NIVEAU EAL3+" (PDF) .
^ Starting with Linux kernel version 2.6.20, CryptoAPI supports the LRW mode: https://lwn.net/Articles/213650/
^ "cryptsetup - manage plain dm-crypt and LUKS encrypted volumes" . 2018-01-01. Retrieved 2018-05-08 .
^ "OS X Lion: About FileVault 2" . Retrieved 2011-01-03 .
^ "Linux/BSD disk encryption comparison" . Archived from the original on 2007-06-29. Retrieved 2006-12-24 .
^ Pawel Jakub Dawidek (2006-06-08). "Data authentication for geli(8) committed to HEAD" . Retrieved 2021-11-22 .
^ For Scramdisk containers
^ For TrueCrypt 4 containers
^ For TrueCrypt 5 and 6 containers
^ " 'CVS: cvs.openbsd.org: src' - MARC" .
^ Containers created with TrueCrypt versions 5.0 or later use XTS, and support LRW/CBC for opening legacy containers only.
External links