To prevent a machine with full disk-encryption from having its key in memory while you're not watching it: - With hibernation it is possible to store the hiber

To prevent a machine with full disk-encryption from having its key in memory while you're not watching it: - With hibernation it is possible to store the hibernation file on the encrypted root partition so you will have to re-enter the password during boot. - With suspend-to-RAM, it would always be in memory.