LibreCrypt: Open-Source disk encryption for Windows

Miscellaneous Notes

• Please, do read the documentation (the FAQ section, in particular) before emailing questions! The FAQ section in particular may well have the answer you're looking for.
• Both versions of LibreCrypt, and LibreCrypt Explorer, are fully compatible with one another.
• From the main window, doubleclicking on a mounted drive will launch explorer on that drive. Rightclicking brings up a context menu.

• After creating a new container it is recommended that you make a backup of the container's CDB.

  • In the case of container files which have their CDB stored as part of the container file, this can be achieved by selecting "Tools | Critical data block | Backup..."
  • In the case of container files where the CDB is stored in a separate keyfile, simply make a backup copy of this keyfile.

• A number of LibreCrypt properties can be changed via the "Tools | Change container/keyfile password/details..." menu-item. Note that volumes must be closed first before they can be modified in this way.

• An option is included to dump out a human readable version of the container's critical data block/keyfile's contents (select "Tools | Critical data block | Dump to human readable file..."). This option is primarily intended to assist developers, and to future-proof volumes file by giving you access to the actual master encryption/decryption key used by the container it dumps out. It should be noted that the inclusion of this option does not present a security risk as it requires that the user to enter the container/keyfile's password immediately before it can operate (obviously, the container/keyfile's password is needed in order to decrypt the critical data block). If an attacker has your container/keyfile's password, clearly this option will give no further information away.
• A "Revert timestamps" option is available from the "Options" dialog. If selected, on opening a container file its timestamps will be noted. When the container is subsequently dismounted, these timestamps will be restored. By default, the PC version of LibreCrypt, and LibreCrypt Explorer, have this option switched on.
• A password is not needed when backing up a container's CDB as the backup copy is not stored in plaintext; it is a literal backup copy of a container's (encrypted) CDB.
• A password is needed when creating a keyfile as this requires that the container's CDB is decrypted, before being re-encrypted with the keyfile's password and written out to the keyfile.