This is a recently created article and the authors may not be familiar with all the tools.
Information may be incorrect or incomplete, please edit or discuss on talk page if you know better |
Technical feature comparison of different disk encryption software.
General information
| Name | Developer | Introduced in | Licensing | Operating systems supported |
|---|---|---|---|---|
| BestCrypt | Jetico | 1993 | Commercial, limited source code | Linux 2.6, Windows NT-based, Windows 9x, Windows 3.1, DOS |
| PGPDisk | PGP Corporation | 1998 | Commercial | Windows NT-based |
| TrueCrypt | TrueCrypt Foundation | 2004-02-02 | Free, open source (custom) | Linux 2.6, Windows NT-based |
| dm-crypt/cryptsetup | — | 2004-03-11[1] | Free, open source (GPL) | Linux 2.6 |
| dm-crypt/LUKS | Clemens Fruhwirth | ? | Free, open source (GPL) | Linux 2.6 |
| FreeOTFE | Sarah Dean | 2004-10-10 | Free, open source (custom) | Windows NT-based, Pocket PC |
Features
| Name | Hidden containers | Pre-boot authentication | Custom authentication | Multiple keys | Passphrase strengthening |
|---|---|---|---|---|---|
| BestCrypt | Yes | No | No | ? | ? |
| PGPDisk | No | No | No | Yes | Yes[2] |
| TrueCrypt | Yes | No | No | No | Yes |
| dm-crypt/cryptsetup | No | Yes[3] | Yes | No | No |
| dm-crypt/LUKS | No | Yes[3] | Yes | Yes | Yes |
| FreeOTFE | Yes | No | No | No | Yes |
Layering
| Name | Whole disk | Partition | Logical volume | File | Swap |
|---|---|---|---|---|---|
| BestCrypt | No | ? | No | Yes | Yes |
| PGPDisk | ? | ? | ? | Yes | ? |
| TrueCrypt | No | ? | No | Yes | No |
| dm-crypt | Yes | Yes | Yes | Yes[4] | Yes |
| FreeOTFE | No | ? | No | Yes | ? |
Modes of operation
| Name | Plain CBC | CBC with ESSIV | LRW |
|---|---|---|---|
| BestCrypt | Yes | No | No |
| PGPDisk | ? | ? | ? |
| TrueCrypt | Yes | No | Yes[5] |
| dm-crypt | Yes | Yes | Yes[6] |
| FreeOTFE | Yes | Yes | No |
Notes and references
- ^ dm-crypt was first included in Linux kernel version 2.6.4: http://lwn.net/Articles/75404/
- ^ PGP private keys are always protected by strenghtened passphrases
- ^ a b dm-crypt volumes can be mounted from the initrd before the system is booted
- ^ dm-crypt can encrypt a file-based volume when used with the losetup utility included with all major Linux distributions
- ^ New containers created with TrueCrypt versions 4.1 and up use LRW, old containers use plain CBC
- ^ Starting with Linux kernel version 2.6.20: http://lwn.net/Articles/213650/
See also
 | This cryptography-related article is a stub. You can help Wikipedia by expanding it. |