FreeOTFE

Contents

Introduction

Unlike all other disk encryption systems, FreeOTFE Explorer does not need any device drivers to be installed on the computer it is run on, making it perfect for use with USB drives (and other removable media), where volumes need to be accessed on PCs where FreeOTFE hasn't been installed, and administrator rights are not available to the user in order to start FreeOTFE in "portable mode". For example, in Internet Cafés (AKA Cybercafés), where PCs are available for use, but only as a "standard" user.

FreeOTFE Explorer is fully compatible with both FreeOTFE and FreeOTFE4PDA volumes, and runs on for MS Windows 2000/XP/Vista/Windows 7 PCs (both 32 and 64 bit)

• Driverless operation - making it ideal for carrying your data securely on USB drives or other removable media. (No administrator rights are required to carry out initial installation or start portably - unlike all other forms of disk encryption.)
• Fully compatibile with FreeOTFE on-the-fly disk encryption
• Source code freely available
• No installation needed
• Easy to use; full wizard included for creating new volumes
• Data encrypted on your PC can be read/written on your PDA, and vice versa
• Powerful: Supports numerous hash/encryption algorithms, and provides a greater level of flexibility than a number of other (including many commercial!) OTFE systems
• Available in English, Spanish, German, Italian, French, Czech, Japanese, Croatian, Greek and Russian - with support for other language translations
• Hash algorithms include: MD5, SHA-512, RIPEMD-320, Tiger and many more
• Cyphers include AES (256 bit), Twofish (256 bit), Blowfish (448 bit), Serpent (256 bit) and many more
• Cypher modes supported include XTS, LRW and CBC (including XTS-AES-128 and XTS-AES-256)
• Security tokens/smartcards supported for extra (optional) security
• Linux compatibility (Cryptoloop "losetup", dm-crypt and LUKS supported)
• "Hidden" volumes may be concealed within other encrypted volumes, providing "plausible deniability"
• Encrypted volumes have no "signature" to allow them to be identified as such
• Encrypted volumes can be either file or partition based.
• Modular design allowing 3rd party drivers to be created, incorporating new hash/cypher algorithms
• Supports password salting (up to 512 bits), reducing the risks presented by dictionary attacks.
• Allows users to backup and restore the critical areas of volume files.
• Keyfile support included; store volumes and their associated metadata separately.
• Volume file timestamps and attributes are reset after dismounting, increasing "plausible deniability"
• Supports volumes files up to 2^63 bytes (8388608 TB)
• Comprehensive documentation
• Plus more...!

Cyphers included:

Hash algorithms included: