veracrypt/VeraCrypt
VeraCrypt
VeraCrypt is a cross-platform disk encryption utility used to create encrypted file containers and secure entire disk partitions. It functions as a tool for full disk encryption and a manager for encrypted volumes, providing a means to protect sensitive data on local disks and removable media across multiple operating systems.
The software is distinguished by its support for plausible deniability, allowing the creation of hidden volumes nested within other encrypted volumes to conceal the existence of data. It also implements hardware-based access control, requiring physical security tokens, smart cards, or keyfiles in addition to passwords to authenticate users.
The project covers a broad range of security capabilities, including the management of EFI-based boot loaders for encrypted operating system booting and the use of high-iteration key derivation to resist brute-force attacks. It includes utilities for volume creation, mounting, and conversion, as well as a command-line interface for automating these administrative tasks.
Features
- Full Disk Encryption - Provides full disk encryption for entire operating system partitions to prevent unauthorized access during boot.
- Full Disk Encryption - Provides full disk encryption for the primary system drive to prevent unauthorized data access and boot-level attacks.
- Multi-Factor Key Composition - Combines passwords, keyfiles, and hardware tokens into a single master key required to decrypt volume headers.
- Encrypted Volume Unlocking - Decrypts and mounts encrypted volumes as virtual disks to enable secure data reading and writing.
- Hidden - Creates hidden volumes within other encrypted volumes to ensure plausible deniability of stored data.
- EFI Boot Loaders - Implements a specialized EFI boot loader to authenticate users and decrypt the system partition during startup.
- Secure Boot Loaders - Loads the operating system from an encrypted partition using specialized boot loaders to prevent offline data theft.
- Cross-Platform Encryption Utilities - Provides consistent volume encryption and mounting capabilities across multiple operating systems.
- Keyfile Authentication - Requires a specific external keyfile in addition to a password as a second factor to decrypt volumes.
- Encrypted Storage - Builds secure encrypted containers and partitions to protect sensitive data from unauthorized access.
- Plausible Deniability Storage - Implements hidden volumes nested within other encrypted volumes to provide plausible deniability regarding sensitive data.
- Virtual Encrypted Disks - Maps decrypted data streams to virtual encrypted disks so the host OS treats them as physical devices.
- Hardware Authentication - Integrates physical security tokens, smart cards, and keyfiles into the authentication workflow for volume access.
- Key Derivation Functions - Uses repeated hashing in key derivation functions to transform passwords into encryption keys and resist brute-force attacks.
- Encrypted Boot Loaders - Loads the operating system from an encrypted partition using a specialized EFI boot loader.
- Boot Configuration Installers - Provides utilities for writing secure boot configurations to storage drives to facilitate system startup from encrypted partitions.
- Hidden Volumes - Supports the creation of hidden volumes within existing encrypted containers to provide plausible deniability.
- Multi-Factor Authentication - Implements multi-factor authentication by requiring physical tokens or keyfiles to unlock encrypted data.
- Token Authentication - Requires physical security tokens, smart cards, or keyfiles in addition to passwords for identity verification.
- CLI System Management - Provides a command-line interface for automating volume creation, mounting, and other administrative tasks.
- Encryption and Privacy - Disk encryption software for secure data storage.
- Sicherheit und Datenschutz - Native disk encryption software for secure data storage.
