The only realistic choice that is practical is to use Veracrypt. If I were you, then I would not worry about interoperability and I would just focus on keeping your sensitive information and data safely secured on one PC or disk drive. In other words, store all of your eggs in one strong basket as possible. Once you start copying and backing up your encrypted data across different PCs, devices, and disk drives, it becomes a security liability and threat to you if someone were to get physical or remote access to one of your devices or disk drives. Again, I would not choose to store super sensitive data especially corporate or work assets at home without authorization because you clearly lack the technical skill sets, knowledge, resources, staff, and financial means to compete with the large companies that do this as their profession.
if this is not possible and you insist upon going down the road that you must travel, then use Veracrypt, but be sure to create a unique key file and save it with each encrypted file container that you create. This creates stronger two-factor authentication. You should avoid single factor password based authentication as much as possible because this greatly increases your risk factors by several large orders of magnitude. If you must store your encrypted data on a disk drive, then at least purchase and use a personal safe at your office or home. Make sure that you remember and record the PIN or combination code. Make sure you keep the backup master key safely stored somewhere outside of your office or home preferably inside a safety deposit box at your local bank branch.
Other tools include Encfs or ecryptfs. Encfs is this:
1.
https://wiki.archlinux.org/index.php/EncFS
2.
http://tuxtweaks.com/2013/10/encrypted- ... nux-encfs/
Ecryptfs is used to encrypt your home folder or partition. Read this:
1.
http://ecryptfs.org/
2.
https://www.howtoforge.com/how-to-encry ... an-squeeze
These are built-in, free, libre, open source and well scrutinized public cipher encryption systems found in most GNU/Linux distributions. They don't require that you use a third-party encryption software application with a different software licensing model like TrueCrypt or Veracrypt. They use the Microsoft Public License which can be tricky especially if some of the plain text data that you encrypt contains licenses or legal fine print that complicates things for you.
You should focus less on the encryption software and more about treating and protecting your PC containing your sensitive data like a high value target server. Once you get into the mindset of a skilled and experienced system administrator whose job is to protect the confidentiality, integrity, and availability of the data itself, then you're on the right path. What good is it to encrypt your data if your PC doesn't work or it gets damaged or stolen?
If you must rely on cloud based backup, then choose Crashplan+. They are the best and most affordably priced product and service available for GNU/Linux currently available. I use it.
The problem with encryption software and tools like the ones that I mentioned go back to my earlier posts. Once you download, copy, record, or store sensitive plain text information or data on your PCs or disk drives, then the game of protecting it becomes much more difficult for you as the owner. If this is unrealistic for you, then choose Veracrypt and follow my suggestions. Don't use Microsoft's NTFS file system. It's old, archaic, and full of bugs. It can fail you when you need it the most. It's too universal and it allows too many people to get dibs on your encrypted data once they crack your password or passphrase.
Stick with AES as much as possible. If you don't trust the US NIST and NSA, then choose Twofish or Serpent if you require maximum security, but choose one or the either and not both or all three. Choose SHA-512 as much as possible. If you don't trust it because it comes from the American government, then choose Whirlpool. Try to concentrate both plain text and enciphered text information and data to one PC and one disk drive as much as possible. Lock down your physical assets and consider your access points carefully. Try not to use 802.11 Wi-Fi as much as possible and use Gigabit Ethernet. Don't use Bluetooth at all. If you must copy and backup your encrypted data, then get a personal safe or a safety deposit box and put your external disk drive in it and lock it at all times when not in usage. If you require cloud based backup, then choose Crashplan+.
If you require more privacy than CrashPlan+, then choose Spideroak, but you'll pay more for their product and service. Spideroak is the gold standard among cloud based backup and synchronization, but it's getting more expensive. You pay for a data plan or pool of data. Two-factor authentication is currently in beta phase and it is not officially supported. CrashPlan+ allows you to create your own custom encryption key so even the company itself cannot decrypt your data at its' Crashplan Central data centers worldwide. Choose to create a custom encryption key when using a password management system and a cloud based backup system and insist upon it as a must have feature.
Physical access equals root access. Remember that. If possible, relocate your physical assets like your PCs or your disk drives to a single room with a single access point and follow my recommendations.
), but in your opinion, what are good encryption tools?
