3 ms·
I assume whole disk encryption is no longer the ssd killer it used to be?
by NikolaNovak 4y ago
I assume whole disk encryption is no longer the ssd killer it used to be?
- flaviut 4y agoNo, definitely not. You can either use the SSD's built-in firmware encryption, which is always on anyways (to allow for fast erase), or you can configure your system to send TRIM commands.
- matja 4y agoIt was ever?
- NikolaNovak 4y agoIt was my understanding that yes. OS encryption would prevent controller from understanding what's on the drive and managing it correctly, up to and including effectively disabling trim command as controller would never see blocks as empty. This is back in days of ocz vertex. It wasn't like advertised / warned on the box, it would work... Just like western digital didn't warn about wd red becoming SMR drive while being advertised for Nas. But it would eventually kill performance and drive. You'd have to read Tom's hardware and anadtech etc to learn about it. I don't really follow anymore so I don't know how nicely os full drive encryption and ssds play today.
- matja 4y agoFDE doesn't prevent TRIM, but the dm-crypt implementation defaults to disabling TRIM because it has theoretical security consequences. The option to enable it was introduced in Linux 3.1 (2011)