FreeOTFE

Infobox Software
name = FreeOTFE

caption = FreeOTFE v4.00
developer = Sarah Dean
latest_release_version = v4.00
latest_release_date = June 26, 2008
operating_system = Microsoft Windows and PocketPC
genre = Transparent disk encryption
license = Open source
website = [http://www.FreeOTFE.org/ www.FreeOTFE.org]

FreeOTFE is an open source "on-the-fly" disk encryption (OTFE — On The Fly Encryption) program for PCs and PDAs ("FreeOTFE4PDA"). It creates "virtual disks" - anything written to which is automatically encrypted before being stored on the computer's hard drive or USB drive.

Overview

FreeOTFE was initially released by Sarah Dean in 2004, and was the first open source disk encryption system that provided a modular architecture allowing 3rd parties to implement additional algorithms if required.

This software is compatible with Linux encrypted volumes (e.g. LUKS, cryptoloop, dm-crypt), allowing data encrypted under Linux to be read (and written) freely. It was the first open source transparent disk encryption system to support Windows Vista and PDAs [ [http://www.freeotfe.org/docs/version_history.htm FreeOTFE version history] ]

Optional two-factor authentication using smart cards and/or hardware security modules (HSMs - also known as security tokens) [ [http://www.freeotfe.org/docs/pkcs11_support.htm Security Token/Smartcard Support] ] was introduced in v4.0, using the PKCS#11 (Cryptoki) standard developed by RSA Laboratories.

"FreeOTFE" also allows any number of "hidden volumes" to be created, giving plausible deniability and deniable encryption, and also has the option of encrypting entire partitions or disks [ [http://www.freeotfe.org/docs/advanced_topics.htm Partition/Entire Disk Based Volumes] ]

Algorithms implemented

Due to its architecture, FreeOTFE provides great flexibility to the user with its encryption options.

Ciphers

There are a number of ciphers implemented in FreeOTFE, including:

All of the NIST AES finalists are included in FreeOTFE, and all of the ciphers can be used with multiple different keylengths

Cipher modes

Originally FreeOTFE offered encryption using CBC with ESSIV, though from v3.00 introduced LRW and also the more secure XTS mode, which supersedes LRW in the IEEE P1619 standard for disk encryption.

Hashes

As with its cipher options, FreeOTFE offers many different hash algorithms:

References

See also

* Disk encryption
* Disk encryption software
* Full disk encryption
* Comparison of disk encryption software

External links

* [http://www.freeotfe.org/ Official FreeOTFE Website]