7: Drive Encryption And Decryption; Drive Encryption/Decryption - Introduction; Encrypting A Destination - Logicube Falcon-NEO User Manual

7.0 Drive Encryption/Decryption - Introduction

The Falcon-NEO allows imaging drives onto a Destination where the data on the Destination drive
is encrypted. This is only supported when using the Drive to File mode.
Falcon-NEO can also decrypt drives that were encrypted using the Falcon-NEO. Alternatively, third
party utilities can be used to decrypt a drive encrypted by the Falcon-NEO such as VeraCrypt,
TrueCrypt, and FreeOTFE.
In the System Settings screen, there is an Encryption tab used to configure the Falcon-NEO for
encryption. There are up to four (4) parameters that must be configured before encryption can be
used. These parameters are necessary to decrypt and read the Destination drive and can be
configured in the Encryption page on the Falcon-NEO:
Cipher Mode – Users can choose between TC-XTS, CBC, ECB, or VCRYPT cipher modes.
•
•
•
•
The Falcon-NEO encrypts drives using AES-256 encryption regardless
of what cipher mode is used. If TC-XTS is used, Falcon-NEO uses a
TrueCrypt friendly format and does not use TrueCrypt to encrypt the
drive. The encryption key is not stored on the Destination drive.
Cipher – The only supported option for this is AES-256.
•
IV Generation – Initialization Vector. Only available when CBC or ECB cipher mode is
•
selected. Choose between PLAIN64 and ESSIV:SHA256.
Encryption (Password or Key) – Users must choose their own encryption password/key.
•
There are many articles on the Internet about AES-256 encryption
and the different modes and settings that come with encryption.

7.1 Encrypting a Destination

To encrypt a Destination, the Encryption settings must be set, and the drive will need to be
formatted using the Falcon-NEO. These steps must be performed prior to an Imaging operation.
Logicube Falcon -NEO User's Manual
®

7: Drive Encryption and Decryption

VCRYPT cipher mode can be decrypted
using the Falcon-NEO or VeraCrypt.
TC-XTS cipher mode can be decrypted
using the Falcon-NEO or TrueCrypt.
CBC or ECB cipher modes can be decrypted
using the Falcon-NEO or FreeOTFE.
94