Projects

Linux Unified Key Setup

LUKS is the upcoming standard for Linux hard disk encryption. By providing a standard on-disk-format, it does not only facilitate compatibility among distributions, but also provide secure management of multiple user passwords. In contrast to existing solution, LUKS stores all setup necessary setup ... [More] information in the partition header, enabling the user to transport or migrate his data seamlessly. [Less]

Mandos

The Mandos system allows computers to have encrypted root file systems and at the same time be capable of remote and/or unattended reboots. The computers run a small client program in the initial RAM disk environment which will communicate with a server over a network. All network communication ... [More] is encrypted using TLS. The clients are identified by the server using an OpenPGP key; each client has one unique to it. The server sends the clients an encrypted password. The encrypted password is decrypted by the clients using the same OpenPGP key, and the password is then used to unlock the root file system, whereupon the computers can continue booting normally. [Less]

FreeOTFE

A free on-the-fly transparent disk encryption program for MS Windows 2000/XP/Vista/Windows 7 PCs (both 32 and 64 bit) and Windows Mobile 2003/2005 and Windows Mobile 6 PDAs. Supports AES in XTS mode and other encryption standards. Supports LUKS format.

cryptsetupapplet

cryptsetup frontend as Gnome applet

TokenTube

Integration component for LUKS and PAM. It allows the use of user credentials for unlocking a LUKS keyslot (instead of using a dedicated encryption passphrase).

Tomb, the Crypto Undertaker

Tomb is a system to make strong encryption easy for everyday use. A tomb is like a locked folder that can be safely transported and hidden in a filesystem. Its keys can be kept separate; for example, you can keep the tomb on your computer and its key on a USB stick or a remote SSH shell. Tomb is ... [More] written in code that is easy to review and links shared components: it consists of a ZShell script and desktop integration apps; it uses standard GNU tools and the cryptographic API of the Linux kernel (dm-crypt) via cryptsetup. [Less]