Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

7 Whole-Disk Encryption Apps Put A Lock On Data: Page 5 of 8

Another feature specific to DriveCrypt: you can create a "DKF access file," which allows a third party to access an encrypted volume without needing the volume password. The DKF key can have various restrictions applied to it -- it can use its own password unrelated to the one on your own disk, expire after X days, or only work between certain hours. This makes it possible to provide a degree of controlled access to an encrypted drive.

Note that by default the program uses the partition id 0x74 to mark whole partitions that have been encrypted -- which makes it easier for the program to recognize and mount an encrypted partition, but also means it's that much easier for a potentially hostile third party to know that a given volume is DC-encrypted. Fortunately, you can defeat this behavior by setting a program option... and you probably should, since you're the only one who ought to know what's an encrypted container and what's not.

DriveCrypt's most intriguing feature is the ability to turn a .WAV file -- whether ripped from a CD or created from scratch -- into a steganographically encrypted container. Either 4 or 8 bits per sample can be used to store the data, so a 700-Mbyte .WAV file (the length of a music CD) can be used to store either 350 Mbytes or 175 Mbytes. The resulting file will still play, although the audio quality will be affected to some degree. (Caveat: It's probably not a good idea to use music from a readily available CD, as an attacker could compare your file against a rip from the CD to determine if hidden data is present, even if they can't decipher it. A voice recording might be better.)

5
FreeOTFE 3.00

Cost: Free / open source

Web site: www.freeotfe.org


FreeOTFE offers a lot of control over encryption implementation.
(click for image gallery)

In many ways FreeOTFE (OTFE meaning "on-the-fly encryption") is quite similar to TrueCrypt -- it offers many of the same features with some slight variations on their deployment, and it's also offered under a highly liberal software license.

The process of creating a new volume is, again, similar to TrueCrypt: there's a wizard that walks you through the process and provides you with relevant options at each step. There's a slightly broader set of choices for the length of the volume salt and the hash, cipher, key, and disk-sectoring systems, although for most people the default choices will be fine. Some options are provided mainly for backwards compatibility, like the now-antiquated MD2 and MD4 hash functions -- use SHA512 or better for newly created disks.