Encryption

http://www.ru.nl/privacy/english/

Overview encryption software per operating system

<thead> </thead> <tbody> </tbody>

	BitLocker	VeraCrypt	Filevault
Windows	x	x
Mac		x	x
Linux		x

Windows

To encrypt your entire system you have a choice between two methods:

• use Bitlocker from microsoft which is integrated in windows pro/enterprise (not in home edition, though we have a campus upgrade license to enterprise)
• use VeraCrypt open source software

It is adviced to use Bitlocker, unless you have a problem with the possibility that Microsoft has made a backdoor in bitlocker you should use VeraCrypt instead.

enable Bitlocker

To enable Bitlocker encryption follow these instructions. After you have enabled bitlocker you can verify its working correctly and has encrypted everything by running on a windows command prompt with administrator rights the following command:

  manage-bde -status   

See check bitlocker status

comparison Bitlocker and Veracrypt

Advantages Bitlocker over Veracrypt

• automatic unlocking at startup with TPM (no password need) => user only needs to login as it is a none-encrypted laptop
• windows recovery/repair supports bitlocker => for veraCrypt you must make special repair disk which is unique for the laptop!

Advantages Veracrypt over Bitlocker

• open source -> more likely that there is no backdoor
• more possibilities eg. stronger encryption! only drive encryption, image encryption etc.
• supported on Linux and OS X, however full system encryption only supported on Windows!!

Linux

http://www.ru.nl/privacy/english/data/saving-files/#hd2819907-cd58-43c6-95c4-a933cc61b1c3