How do I know FreeOTFE is encrypting my data, and with the encryption algorithm I choose?
To verify that encryption/decryption is taking place for Linux volumes, create an encrypted volume using Linux; then mount it using FreeOTFE. The encrypted Linux volume will be fully readable (and writable) using FreeOTFE – confirming that the same encryption is taking place under FreeOTFE as Linux. For FreeOTFE volumes, the critical data block can be dumped out (see “Tools | Dump to human readable file…” menu), and the master encryption key used to mount the same volume under Linux (offsetting for the CDB) – again proving that encryption is taking place. WARNING: Contrary to popular belief, a user interface which accepts and processes encryption test vectors does not prove anything! It is a trivial task to take a secure cypher, and use it to process test vectors provided by the user, while actually using a very weak and insecure cypher to carry out encryption/decryption on the data being stored!
