Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

7 Whole-Disk Encryption Apps Put A Lock On Data: Page 6 of 8

One nice feature that TrueCrypt doesn't seem to offer is the ability to run arbitrary scripts after a volume mount and both before and after a volume dismount -- for instance, to perform cleanup of temporary files or other forensic scrubbing. Another handy function for Linux users is the ability to work with native Linux file system encryption drivers, such as Cryptoloop, dm-crypt, and LUKS.

Like TrueCrypt, you can also elect to create a separate keyfile, although the mechanism is a little different. TrueCrypt's keyfile for a volume can be any file at all, since it's used in a read-only fashion. FreeOTFE creates a keyfile from scratch to store a volume's metadata block, which could be placed on a USB key as a way to provide further physical security. When generating the random data for the new volume, the user can opt to employ the Microsoft CryptoAPI, data garnered from mouse movements for additional randomness, or both.

Also, like TrueCrypt, FreeOTFE can be used to hide one encrypted volume inside another, but the process for doing so is a little complicated. The user needs to manually specify a "byte offset" value that describes where the hidden volume will be located. If you don't know the offset value (and the hidden volume password), you won't be able to mount the hidden volume at all. This also makes it possible to hide an encrypted volume within an un-encrypted volume, albeit with some difficulty.

There's a strong emphasis on portability with FreeOTFE. User settings for the app can be saved either to the user's own profile or in a global fashion (i.e., to the program directory). Also, as with TrueCrypt, FreeOTFE features a "portable mode" -- a way to place the FreeOTFE executables and encrypted volume on a removable disk so it can be used on another computer, even one that doesn't have FreeOTFE installed. Finally, FreeOTFE is also available for Windows Mobile 6-based PDAs; volumes created or used on the desktop can be used on a PDA and vice versa.

6
PGP Desktop Professional

Cost: $199 per seat
Web site: www.pgp.com


PGP Desktop Professional provides e-mail and instant message encryption.
(click for image gallery)

PGP Desktop provides a whole suite of encryption tools that are designed to integrate as elegantly as possible with a Windows system, regardless of the application mix (although there are a few exceptions to that rule). It's best for those who are looking for comprehensive encryption coverage and are willing to pay a bit for something full-featured.

The program's main interface has five basic sections: key management, messaging, compression, disk management, and NetShare. The key management section is where you'll probably get started -- you can create new encryption keys, import existing ones from an external keyring, publish keys to PGP's global key directory (and search for other keys there as well), and so on.