BestCrypt Volume Encryption

Download

Buy standard license

Buy full BestCrypt license

BestCrypt with BestCrypt Volume Encryption

BestCrypt Volume Encryption software provides transparent encrypting all the data stored on fixed and removable disk devices.

BestCrypt Volume Encryption software opens a new class of Volume Encryption products. With the software users can encrypt old MS-DOS style disk partitions as well as modern volumes residing on a number of physical disk devices, for example Spanned, Striped, Mirrored or RAID-5 volumes. (Read more about Volume Encryption in What is Volume Encryption? article.)

Main Features

Encrypting all types of volumes residing on fixed and removable disks:
- Simple volume, i.e. volume consisting of one disk partition.
- Mount point - volume mounted as a sub-folder on NTFS-formatted volume.
- Multipartition volume, i.e. volume consisting of several disk partitions:
BestCrypt Volume Encryption allows encrypting data with many strong encryption algorithms. Every algorithm is implemented with the largest possible key size defined in the algorithm's specification:
- AES (Rijndael) - 256-bit key.
- Blowfish - 448-bit key.
- CAST - 128-bit key.
- GOST 28147-89 - 256-bit key.
- RC6 - 256-bit key.
- Serpent - 256-bit key.
- Twofish - 256-bit key.

BestCrypt Volume Encryption utilizes LRW Encryption Mode with all encryption algorithms listed above. LRW Mode is specially designed for applications working on disk sector level and more secure than other popular modes used earlier, like Cipher Block Chaining (CBC) mode.

BestCrypt Volume Encryption can encrypt volumes where Windows boots from, as well as the volume where Windows stores its system files (including Registry, Page file and Hibernate file). Initial encryption is transparent both for running applications and for Windows system modules.
BestCrypt Volume Encryption performs Computer Pre-Boot Authentication if system or boot volume/partition is encrypted. It means that BestCrypt Volume Encryption loads before operating system and allows computer to boot only after entering a proper password.
BestCrypt Volume Encryption provides an easy way to customize Pre-Boot Authentication texts appeared when the user is required to enter password. The feature allows displaying additional hints when the user is being prompted to enter a password and even hide the fact that pre-boot authentication is running.
BestCrypt Volume Encryption supports hardware tokens Aladdin eToken R2 and PRO as a secure hardware storage for encryption keys. With hardware token users get two levels of protection for encrypted data, because in addition to password it is necessary to connect small hardware token where encryption key is stored.
BestCrypt Volume Encryption provides Secure Hibernating. If user encrypts volume where Windows stores Hibernate File, BestCrypt Volume Encryption encrypts all write operations when Windows goes into Hibernate state and decrypts read operations when the computer wakes up from Hibernate state. Since pre-boot authentication is necessary at wake-up time, only the user who knows the proper password (and has hardware token, if used) can run computer from Hibernate mode. Secure Hibernating is a functionality that must be implemented in such software as BestCrypt Volume Encryption, otherwise all data written at Hibernate time (together with encryption keys) appears on disk in opened decrypted form.
As well as Hibernate File, BestCrypt Volume Encryption encrypts Windows Crash Dump Files. Windows writes files in a very special way, because when a crash occurs, regular disk write operations cannot be used. Without encrypting Crash Dump Files the security level of the software were significantly lower, because the files can store a snapshot of memory together with encryption keys on disk in opened decrypted form.
BestCrypt Volume Encryption supports a number of rescue functions allowing users to decrypt volumes if a serious disk crash occurs.
BestCrypt Volume Encryption Plugin for BartPE bootable CD/DVD is available. The user can boot computer with encrypted volume using the bootable CD/DVD and run BestCrypt Volume Encryption commands directly from the CD/DVD. The functionality can be extremely useful for various recovering purposes.
Besides of the functionality that must be in such kind of software, BestCrypt Volume Encryption cares about convenience in using the software:
- If some folders on encrypted volume are shared for network access, BestCrypt Volume Encryption will automatically restore the shares when the user mounts the volume. The software stores information about shared folders in encrypted form.
- BestCrypt Volume Encryption allows optional mounting not system volumes automatically before computer starts loading operating system ("Mount at Boot Time" option).
- The software allows per-user setting for mounting not system volumes when the user logs on ("Mount at Logon" option).
- The software has an option to hide drive letters for volumes that are not mounted. The option allows avoiding accidental formatting not mounted encrypted volumes.
- BestCrypt Volume Encryption can display contents of physical sectors, relatively to physical disk or logical volume. The sectors' data can be saved to file or restored from file.

Translations

BestCrypt Volume Encryption supports a special technology allowing an easy translating the software to any language. Adding new text file to "Language" subfolder (in the folder where the software is installed) makes the software speak new language. At the moment BestCrypt Volume Encryption is translated to the following languages:

Language Software Interface Translator Help File Translator

Brazilian Portuguese Marcello Fontolan —

Chinese Shao Ziyang Shao Ziyang

Czech Pepa Kokes Pepa Kokes

Danish Cronner —

Dutch Coen Gross —

English Jetico, Inc. Jetico, Inc.

French Jean-Pascal Dumont —

German Translating - Stefan Martens
proof-reading and assistance - Uwe Keller —

Hungarian Peter Kovacs —

Italian Danilo Mascheretti —

Polish Marek Stefaniak (ST-Computers) —

Russian Igor M. Arsenin Igor M. Arsenin

Slovak Sajrusak and IvkO —

Spanish Manuel Montero (Senpai) —

Turkish Ertunga Arsal —

If you wish to make BestCrypt Volume Encryption speak your native language and more useful for your compatriots, please write to our Technical Support: support@jetico.com.

Changelog

07-May-2008 | v.1.99.5 | driver v.1.63: The software is translated to Danish language by Cronner.
29-April-2008 | v.1.99.4 | driver v.1.63: Translation to Italian language by Danilo Mascheretti added.
Hide drive letters for not mounted volumes option fixed to work correctly with Windows Switch user functionality.
25-March-2008 | v.1.99.3 | driver v.1.63: 1. Solved problem of encrypting second Windows XP installation on different hard drive when volume with first Windows XP installation is not encrypted.
2. Problem of encrypting boot/system volume on computers with Windows 2003 Server, ABIT motherboard and hyperthread processor discovered and solved.
04-March-2008 | v.1.99.2 | driver v.1.62: User interface translated to Hungarian language by Peter Kovacs.
28-February-2008 | v.1.99.1 | driver v.1.60: 1. Practical countermeasures against attack described in the Cold Boot Attacks on Encryption Keys article implemented. Read BestCrypt FAQ, question 2.6 for more detailed information about the attack and the countermeasures.
2. User interface translated to Spanish language by Manuel Montero (Senpai) released.
13-February-2008 | v.1.98.12 | driver v.1.58: Performance of encrypted disk volume IO operations increased approximetely by 5%. Removed unnecessary warning messages recommending the user to update Rescue file.
24-January-2008 | v.1.98.11 | driver v.1.57: Fixes: 1. Restoring network share information on encrypted volumes in Vista x64; 2. Recovery process for mirrored boot volume in Windows Server 2003.
24-December-2007 | v.1.98.09 | driver v.1.57: Small enhancements in user interface program. Problem of reporting number of incorrectly entered password at boot time fixed.
14-November-2007 | v.1.98.08 | driver v.1.56: Dismount volume procedure enhanced.
01-November-2007 | v.1.98.07 | driver v.1.56: BCVE now supports Aladdin eTokens in Windows Vista 32-bit Edition with Aladdin RTE 3.66 installed. Problem of incompatibility with ABIT AB9 Pro motherboard is fixed.
11-October-2007 | v.1.98.6 | driver v.1.55: Enhancement in: hibernating procedure; module supporting Aladdin eTokens (BCVE still requires installation Aladdin RTE v.3); in rec_mbr.exe program available on BCVE rescue bootable disk (read more in file rec_mbr.txt in the folder where the software is installed).
17-September-2007 | v.1.98.5 | driver v.1.54: Recovery procedure running from bootable CD is fixed to avoid error in writing rescue file. BCVE user interface translated to Turkish language by Ertunga Arsal.
08-August-2007 | v.1.98.4 | driver v.1.54: The software now detects when defragmenting utility moves BCVE configuration files and correctly updates them.
11-July-2007 | v.1.98.3 | driver v.1.53: Recovery process for RAID-5 volumes with failed hard drive is now possible. New utility to recover MBR sector (rec_mbr.exe) for boot-time recovery process developed. Read more detail about rec_mbr.exe program in rec_mbr.txt file in the folder where the software is installed.
25-June-2007 | v.1.98.2 | driver v.1.53: The user can now run the software from a command-line prompt to mount and dismount encrypted volumes. To get more detailed information about command line parameters run bcfmgr.exe with -? parameter:
> bcfmgr.exe -?
19-June-2007 | v.1.98.1 | driver v.1.53: User interface translated to French language by Jean-Pascal Dumont.
BestCrypt Volume Encryption Plugin for BartPE bootable CD/DVD is available. The user can boot computer with encrypted volume using the bootable CD/DVD and run BestCrypt Volume Encryption commands directly from the CD/DVD. The functionality can be extremely useful for various recovering purposes.
Solved problem of recovering in case when boot and system volumes are different and only boot volume is encrypted.
15-May-2007 | v.1.97.4 | driver v.1.52: Security enhancements: the software now detects possible attack when code in Master Boot Record is replaced for the purpose of intercepting password entered at boot-time. Other enhancements: 1. User interface is translated to Slovak language by Sajrusak and IvkO; 2. Hibernate support is enhanced; 3. New option "Work with floppy drives" added. The option allows turning off scanning floppy drives when the program starts to avoid delay and noise appeared when the drives are accessed.
13-April-2007 | v.1.97.2 | driver v.1.49: Besides of BCVE user interface, Shao Ziyang has finished translating help documentation to Chinese language, we beleive BCVE now is more easy in use for Chinese speaking people.
Solved conflict with Raxco PerfectDisk defragmenting software. Windows Vista Disk Management utility now correctly displays information about encrypted volumes.
22-March-2007 | v.1.96.3 | driver v.1.46: BCVE user interface translated to Dutch language by Coen Gross. Solved conflict with RAM disk software - Cenatek RamDisk XP and SuperSpeed's RamDisk Plus.
16-March-2007 | v.1.96.1 | driver v.1.45: BCVE user interface translated to Chinese language by Shao Ziyang. Procedure of changing password for encrypted volumes on removable devices fixed.
20-February-2007 | v.1.95.1 | driver v.1.44: Several issues concerning "Hide drive letters for not mounted volumes" options fixed (hiding drive letters at startup time, incorrect selecting several volumes with hidden drive letters).
09-February-2007 | v.1.95 | driver v.1.44: BCVE user interface translated to Brazilian Portuguese language by Marcello Fontolan. Problem of shutting down computer with encrypted volumes in Windows 2000 SP4 solved. Compatibility issue with Windows Vista Memory Diagnostic Tool is fixed.
12-January-2007 | v.1.94 | driver v.1.42: Complete translation of both BCVE user interface and help documentation to Czech language made by Pepa Kokes added. Translation of BCVE user interface made by Stefan Martens added. Minor problem of displaying "Mount at Boot time" option fixed.
19-December-2006 | v.1.93 | driver v.1.41: Beta testing period is finished, commercial version is released. BestCrypt Volume Encryption beta testers are welcome to contact our technical support and receive free licenses for the software.
07-December-2006 | v.1.92 | driver v.1.41: Enhancements:
1. Option "Hide drive letters for not mounted volumes" developed. Not mounted encrypted volumes look like not formatted volumes and Windows sometimes suggests the user should format them. The option allows avoiding accidental formatting not mounted encrypted volumes.
2. New "Software Language" option developed. At the moment the user can choose the software interface in English, Polish or Russian language. The software can be easily translated to other languages without using any special tools and recompiling any program module.
3. BCVE now supports "forced dismounting" for not boot/system volumes. It means that the user can dismount the volumes in special cases even if there are opened files on the volumes.
Fixes:
1. Recovering procedure for not system/boot volume is fixed for the case when 0th volume sector is damaged.
2. BCVE disables MediaDirect functionality on Dell notebooks to avoid overwriting MBR (Master Boot Record) structure on hard drive.
16-November-2006 | v.1.91 | driver v.1.41: The software now supports creating ISO image file for Rescue CD. If system/boot volume(s) is encrypted, the user can save the ISO file in some safe place and use any CD burning software at any time to burn the Rescue CD.
09-November-2006 | v.1.90 | driver v.1.41: BCVE driver is fixed: a). Support of mounting volumes at boot time in Windows Vista; b). Occasional hanging when disk device is detected by Windows.
02-November-2006 | v.1.90 | driver v.1.39: Command Mount at Boot time added for encrypted volumes. Problem of complete encrypting volumes stored on hard drives with bad sectors is fixed.
20-October-2006 | v.1.89 beta | driver v.1.38: Update information. The software supports 32-bit and 64-bit versions of Windows Vista RC2.
Enhancement. BestCrypt Volume Encryption allows unmounting not-bootable volumes. As a result, since Windows cannot access data on the volume anymore, it forgets all information about shared folders on the volume. Since v.1.89 the software saves information about shared folders in encrypted form and restores the network shares when the user mounts the volume next time. The software saves/restores shares automatically, so the user should not run any special commands.
19-September-2006 | v.1.88 beta | driver v.1.36: Problem of encrypting compressed NTFS volumes solved. Minor changes in user interface.
15-September-2006 | v.1.87 beta | driver v.1.35: The software now supports 32-bit and 64-bit versions of Windows Vista RC1.
23-August-2006 | v.1.85 beta | driver v.1.35: Command Mount at Logon added for encrypted volumes. Problem of running disk checking utility for FAT32 formatted system volume is fixed.
14-August-2006 | v.1.84 beta | driver v.1.34: Incorrect interpretation of long passwords fixed. Toolbar button to refresh disk state of not plug-and-play disk devices added. English language in user interface program corrected.
05-August-2006 | v.1.83 beta | driver v.1.34: Encrypting USB flash devices fixed.
25-July-2006 | v.1.81 beta | driver v.1.32: Corrected correspondence between logical and physical sectors' numbers for removable disks in 'View Sectors' dialogs.
18-July-2006 | v.1.80 beta | driver v.1.32: BestCrypt Volume Encryption v.1.80 beta is announced.