4 ms·
Using TRIM means you can't plausibly deny using encryption on the disk. Any data trimmed will read as zeros. It also opens you up to a few more attack vectors s
by Teknoman117 5y ago
Using TRIM means you can't plausibly deny using encryption on the disk. Any data trimmed will read as zeros. It also opens you up to a few more attack vectors since the attacker knows exactly where the ciphertext is located (start, end, size, etc.). This means that if your filesystem has data structures in fixed locations, they know exactly where in the ciphertext those would be located and can focus attacks on those since there is a significantly smaller set of possibilities for what the plaintext could be.
In practice, it depends on the level of paranoia that's needed for your situation. Trying to prevent your average thief from getting your bank info off your laptop? Probably not an issue. Hiding data from the NSA? Possibly a problem. I run TRIM on my SSDs, but I also live in a country where theoretically I don't have to give up the key. Admittedly, I'm not doing anything illegal, the only thing they'll find are a bunch of git repos, game installs, 2000's alternative rock, Scandinavian folk metal, and bad vacation pictures.