Comparison of disk encryption software

This is an old revision of this page, as edited by Intgr (talk | contribs) at 19:22, 24 December 2006 (incompleteness warning; partial "features" comparison; LUKS). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Technical feature comparison of different disk encryption software.


General information

Name Developer Introduced in Licensing Operating systems supported
BestCrypt Jetico 1993 Commercial, limited source code Linux 2.6, Windows NT-based, Windows 9x, Windows 3.1, DOS
PGPDisk PGP Corporation 1998 Commercial Windows NT-based
TrueCrypt TrueCrypt Foundation 2004-02-02 Free, open source (custom) Linux 2.6, Windows NT-based
dm-crypt/cryptsetup 2004-03-11[1] Free, open source (GPL) Linux 2.6
dm-crypt/LUKS Clemens Fruhwirth ? Free, open source (GPL) Linux 2.6
FreeOTFE Sarah Dean 2004-10-10 Free, open source (custom) Windows NT-based, Pocket PC

Features

Name Hidden containers Pre-boot authentication Custom authentication
BestCrypt Yes No No
PGPDisk No No No
TrueCrypt Yes No No
dm-crypt/cryptsetup No Yes[2] Yes
dm-crypt/LUKS No Yes[2] Yes
FreeOTFE Yes No No

Layering

Name Whole disk Partition Logical volume File Swap
BestCrypt No ? No Yes Yes
PGPDisk ? ? ? Yes ?
TrueCrypt No ? No Yes No
dm-crypt Yes Yes Yes Yes[3] Yes
FreeOTFE No ? No Yes ?

Modes of operation

Name Plain CBC CBC with ESSIV LRW
BestCrypt Yes No No
PGPDisk ? ? ?
TrueCrypt Yes No Yes[4]
dm-crypt Yes Yes Yes[5]
FreeOTFE Yes Yes No

Notes and references

  1. ^ Included in Linux 2.6.4: http://lwn.net/Articles/75404/
  2. ^ a b Can be mounted from initrd
  3. ^ dm-crypt can encrypt a file-based volume when used with the losetup utility included with all major Linux distributions
  4. ^ New containers created with TrueCrypt versions 4.1 and up use LRW, old containers use plain CBC
  5. ^ Starting with Linux kernel version 2.6.20: http://lwn.net/Articles/213650/

See also