Tomb

Tomb is a minimalist command-line tool for Linux that creates and opens encrypted volumes, called "tombs", on top of the kernel's own dm-crypt and LUKS stack. It is essentially a small, auditable shell script that wraps standard, trusted tools so there is little novel cryptography to worry about and it can hide the key file with steganography or require a FIDO2 device to open a volume. It is developed by the Netherlands-based Dyne.org Foundation and is free and open source, with releases continuing through 2025 (version 2.13). It is Linux-only and expects comfort with the terminal. Choose it when you want no-frills encrypted storage on Linux without adopting a large application.