This is a technical feature comparison of different disk encryption software.
Background information + Disk encryption software Name Developer First released Licensing Maintained? Aloaha Crypt Disk Aloaha 2008 ArchiCrypt Live Softwaredevelopment Remus ArchiCrypt 1998 BestCrypt Jetico 1993 BitArmor DataControl BitArmor Systems Inc. 2008-05 BitLocker Microsoft 2006 Bloombase StoreSafe Bloombase 2012 Boxcryptor Secomba GmbH 2011 CGD Roland C. Dowdeswell 2002-10-04 CenterTools DriveLock CenterTools 2008 Check Point Full Disk Encryption Check Point Software Technologies Ltd 1999Company and product name change to Pointsec CipherShed CipherShed Project 2014 CrossCrypt Steven Scherrer 2004-02-10 CryFSSebastian Messmer2015 CryhodPrim'X Technologies2010 Cryptainer Cypherix Software 1998 Cryptic Disk Exlade 2003 CryptArchiver WinEncrypt Cryptoloop 2003-07-02Initial cryptoloop patches for the Linux 2.5 development kernel: Cryptomator Skymatic UG (limited liability) 2016-03-09 CryptoPro Secure Disk Enterprise cpsd it-services GmbH 2010 CryptoPro Secure Disk for BitLocker cpsd it-services GmbH 2012 CryptSync Stefan Küng 2012 Discryptor Cosect Ltd. 2008 DiskCryptor ntldr, David Xanatos 2007 DISK Protect Becrypt Ltd 2001 Cryptsetup / Dmsetup Christophe Saout 2004-03-11dm-crypt was first included in Linux kernel version 2.6.4: https://lwn.net/Articles/75404/ Dm-crypt / LUKS Clemens Fruhwirth (LUKS) 2005-02-05 DriveSentry GoAnywhere 2 DriveSentry 2008 E4M Paul Le Roux 1998-12-18 e-Capsule Private Safe EISST Ltd. 2005 eCryptfs Dustin Kirkland, Tyler Hicks, (formerly Mike Halcrow) 2005 EgoSecure HDD Encryption EgoSecure GmbH 2006 EncFS Valient Gough 2003 EncryptStick ENC Security Systems 2009 FileVault Apple Inc. 2003-10-24 FileVault 2 Apple Inc. 2011-07-20 FREE CompuSec CE-Infosys 2002 FreeOTFE Sarah Dean 2004-10-10 GBDE Poul-Henning Kamp 2002-10-19 GELI Pawel Jakub Dawidek 2005-04-11 GnuPG Werner Koch 1999-09-07Release Notes. GnuPG gocryptfs Jakob Unterwurzacher 2015-10-07 Knox AgileBits 2010 KryptOS The MorphOS Development Team 2010 LibreCrypt tdk 2014-06-19 Loop-AES Jari Ruusu 2001-04-11 McAfee Drive Encryption (SafeBoot) McAfee, LLC 2007 n-Crypt Pro n-Trance Security Ltd 2005 PGPDisk PGP Corporation (acquired by Symantec in 2010) 1998-09-01 Private Disk Dekart 1993 ProxyCrypt v77 2013 R-Crypto R-Tools Technology Inc 2008 SafeGuard Easy Sophos (Utimaco) 1993 SafeGuard Enterprise Sophos (Utimaco) 2007 SafeGuard PrivateDisk Sophos (Utimaco)Rebranded as ThinkVantage Client Security 2000 SafeHouse Professional PC Dynamics, Inc. 1992 Scramdisk Shaun Hollingworth 1997-07-01 Scramdisk 4 Linux Hans-Ulrich Juettner 2005-08-06 SecuBox Aiko Solutions 2007-02-19 SECUDE Secure Notebook SECUDE 2003 Seqrite Encryption Manager Quick Heal Technologies Ltd. 2017 Sentry 2020 SoftWinter 1998 Softraid / RAID C OpenBSD 2007-11-01 SpyProof! Information Security Corp. 2002 Svnd / Vnconfig OpenBSD 2000-12-01 Symantec Endpoint Encryption Symantec Corporation 2008 Tcplay Alex Hornung 2012-01-28 Last update: 2020-03-02 Trend Micro Endpoint Encryption (Mobile Armor) Trend MicroTrend Micro 2004 or earlier TrueCrypt TrueCrypt Foundation 2004-02-02 USBCrypt WinAbility Software Corp. 2010 VeraCrypt IDRIX 2013-06-22 TrueCrypt License Version 3.0 (legacy code only) CyberSafe Top Secret CyberSoft 2013 Name Developer First released Licensing Maintained?
Operating systems Name Android Windows NT iOS Mac OS X Linux FreeBSD OpenBSD NetBSD Aloaha Crypt Disk BestCrypt Volume Encryption BitArmor DataControl BitLocker https://github.com/Aorimn/dislocker FUSE driver to read/write Windows BitLocker-ed volumes under Linux / Mac OSX. In addition cryptsetup and Linux 5.6+ can open bitlocker volumes (except volumes with legacy header used in Windows Vista or partially decrypted volumes) with either a password, a recovery passphrase, a startup key, or the volume key. Bloombase StoreSafe Boxcryptor CenterTools DriveLock CGD Check Point Full Disk Encryption CipherShed https://play.google.com/store/apps/details?id=com.sovworks.edslite Third party app allows to open containers encryptes with AES-256, SHA-512 hash and FAT file system http://www.truecrypt.org/misc/freebsd Although CipherShed can be built under FreeBSD, it is not recommended to run it because of bugs and instabilities when CipherShed is attempted to be used CrossCrypt CrossCrypt - Only for the Microsoft Windows XP/2000 operating systems CryFS Cryhod Cryptainer CryptArchiver Cryptic Disk Cryptoloop http://www.freeotfe.org/docs/Main/Linux_volumes.htm FreeOTFE supports cryptoloop, dm-crypt/cryptsetup/dmsetup, and dm-crypt/LUKS volumes Cryptomator CryptoPro Secure Disk Enterprise CryptoPro Secure Disk for BitLocker Cryptsetup / Dmsetup CryptSync Discryptor DiskCryptor DISK Protect Dm-crypt / LUKS DriveSentry GoAnywhere 2 E4M e-Capsule Private Safe eCryptfs EgoSecure HDD Encryption EncFS (FUSE) (FUSE) (FUSE) (FUSE) EncryptStick EncryptUSB FileVault FileVault 2 https://code.google.com/p/libfvde/ libfvde supports reading FileVault2 Drive Encryption (FVDE) encrypted volumes. In addition cryptsetup also has partial FileVault2 support: it can open FileVault2 volumes with Core Storage and HFS+ filesystem, with a password. FREE CompuSec FreeOTFE http://www.freeotfe.org/docs/Main/Linux_volumes.htm Supports Linux volumes GBDE GELI Knox LibreCrypt https://play.google.com/store/apps/details?id=com.nemesis2.luksmanager&hl=en_GB Third party app allows a user to open LibreCrypt compatible LUKS containers https://github.com/t-d-k/LibreCrypt/blob/master/docs/Linux_volumes.md Supports Linux volumes Loop-AES McAfee Drive Encryption (SafeBoot) n-Crypt Pro PGPDisk PGP Whole Disk Encryption Private Disk ProxyCrypt R-Crypto SafeGuard Easy SafeGuard Enterprise SafeGuard PrivateDisk SafeHouse Professional Scramdisk Scramdisk 4 Linux SecuBox SecureDoc Sentry 2020 Seqrite Volume Encryption Softraid / RAID C SpyProof! Svnd / Vnconfig Symantec Endpoint Encryption Tcplay Trend Micro Endpoint Encryption TrueCrypt http://www.truecrypt.org/misc/freebsd Although TrueCrypt can be built under FreeBSD, it is not recommended to run it because of bugs and instabilities when TrueCrypt is attempted to be used USBCrypt VeraCrypt https://play.google.com/store/apps/details?id=com.sovworks.eds.android Third party app allows to encrypt and decrypt VeraCrypt containers (only available in the paid version) https://apps.apple.com/de/app/disk-decipher/id516538625 Third party app allows to encrypt and decrypt VeraCrypt containers (only available in the paid version) CyberSafe Top Secret Name Android Windows NT iOS Mac OS X Linux FreeBSD OpenBSD NetBSD
Features Hidden containers: Whether hidden containers (an encrypted container (A) within another encrypted container (B) so the existence of container A can not be established)http://www.jetico.com/linux/bcrypt-help/c_hiddn.htm Hidden containers description from Jetico (BestCrypt) can be created for deniable encryption. Note that some modes of operation like CBC with a plain IV can be more prone to watermarking attacks than others. Pre-boot authentication: Whether authentication can be required before booting the computer, thus allowing one to encrypt the boot disk. Single sign-on: Whether credentials provided during pre-boot authentication will automatically log the user into the host operating system, thus preventing password fatigue and reducing the need to remember multiple passwords. Custom authentication: Whether custom authentication mechanisms can be implemented with third-party applications. Multiple keys: Whether an encrypted volume can have more than one active key. Passphrase strengthening: Whether key strengthening is used with plain text passwords to frustrate dictionary attacks, usually using PBKDF2 or Argon2. Hardware acceleration: Whether dedicated cryptographic accelerator expansion cards can be taken advantage of. Trusted Platform Module: Whether the implementation can use a TPM cryptoprocessor. Filesystems: What filesystems are supported. Two-factor authentication: Whether optional security tokens (hardware security modules, such as Aladdin eToken and smart cards) are supported (for example using PKCS#11) + Features of disk encryption software Name Hidden containers Pre-boot authentication Single sign-on Custom authentication Multiple keys Passphrase strengthening Hardware acceleration TPM Filesystems Two-factor authentication Aloaha Secure Stick ArchiCrypt Live Secret-containers and Camouflage files ArchiCrypt Live Description Supports "Guest" keys Using "Archicrypt Card" BestCrypt Supported by the BestCrypt container format; see BestCrypt SDK Supported by the BestCrypt Volume Encryption software BitArmor DataControl BitLocker With PIN or USB key BitLocker Drive Encryption: Value Add Extensibility Options Recovery keys only. Bloombase StoreSafe CGD CenterTools DriveLock Check Point Full Disk Encryption CipherShed (limited to one per"outer" container) Although each volume encrypted with CipherShed can only have one active master key, it is possible to access its contents through more than one header. Each header can have a different password and/or keyfiles if any (cf. TrueCrypt FAQ: Is there a way for an administrator to reset a volume password or pre-boot authentication password when a user forgets it (or loses a keyfile)?) CryFS CrossCrypt CryptArchiver Cryptic Disk Cryhod Cryptoloop dm-crypt and cryptoloop volumes can be mounted from the initrd before the system is booted Cryptomator CryptoPro Secure Disk Enterprise CryptoPro Secure Disk for BitLocker Cryptsetup / Dmsetup DiskCryptor DISK Protect Dm-crypt / LUKS DriveSentry GoAnywhere 2 E4M e-Capsule Private Safe eCryptfs uses the lower filesystem (stacking) EgoSecure HDD Encryption EncryptUSB FileVault ? FileVault 2 FREE CompuSec FreeOTFE FreeOTFE has a modular architecture and set of components to allow 3rd party integration FreeOTFE allows multiple keys to mount the same container file via encrypted keyfiles GBDE GELI Loop-AES Using customization McAfee Drive Encryption (SafeBoot) n-Crypt Pro n-Crypt Pro does not use password authentication— biometric/USB dongle authentication only PGPDisk PGP private keys are always protected by strengthened passphrases Private Disk ProxyCrypt R-Crypto SafeGuard Easy SafeGuard Enterprise SafeGuard PrivateDisk SafeHouse Professional Scramdisk Scramdisk 4 Linux For TrueCrypt containers SecuBox SecureDoc Seqrite Encryption Manager Sentry 2020 Softraid / RAID C Svnd / Vnconfig optional by using -K OpenBSD Manual Pages: vnconfig(8) Symantec Endpoint Encryption Trend Micro Endpoint Encryption TrueCrypt (limited to one per"outer" container) Although each volume encrypted with TrueCrypt can only have one active master key, it is possible to access its contents through more than one header. Each header can have a different password and/or keyfiles if any (cf. TrueCrypt FAQ: Is there a way for an administrator to reset a volume password or pre-boot authentication password when a user forgets it (or loses a keyfile)?) VeraCrypt (limited to one per"outer" container) CyberSafe Top Secret Name Hidden containers Pre-boot authentication Single sign-on Custom authentication Multiple keys Passphrase strengthening Hardware acceleration TPM Filesystems Two-factor authentication
Layering Whole disk: Whether the whole physical disk or logical volume can be encrypted, including the partition tables and master boot record. Note that this does not imply that the encrypted disk can be used as the boot disk itself; refer to pre-boot authentication in the features comparison table. Partition: Whether individual disk partitions can be encrypted. File: Whether the encrypted container can be stored in a file (usually implemented as encrypted loop devices). Swap space: Whether the swap space (called a "pagefile" on Windows) can be encrypted individually/explicitly. Hibernation file: Whether the hibernation file is encrypted (if hibernation is supported).