- On Linux, encryption can be layered on top of a file system
- using a loopback device
. This allows an entire
- file system partition to be encrypted on disk, and decrypted by the
- operating system. On FreeBSD, the equivalent facility is called
- GEOM Based Disk Encryption (
gbde), and many
- other operating systems support this functionality, including Windows.
+ Storage encryption can be performed at the file system level or the
+ block level. Linux file system encryption options include eCryptfs
+ and EncFS, while FreeBSD uses PEFS. Block level or full disk
+ encryption options include dm-crypt + LUKS on Linux and GEOM
+ modules geli and gbde on FreeBSD. Many other operating systems
+ support this functionality, including Windows.