4 ms·
You should always use disk encryption and shutdown(hibernate) your notebook while traveling. There is no noticeable performance degradation on modern hardware.
by mike_esspe 13y ago
You should always use disk encryption and shutdown(hibernate) your notebook while traveling. There is no noticeable performance degradation on modern hardware.
Windows: Truecrypt
Linux: dm-crypt + LUKS
FreeBSD: gdbe
MacOS: probably FileVault
- PetrolMan 13y agoIsn't hibernation actually a potential risk since the state of the machine is stored, which could potentially provide access to restricted files?
- unsignedint 13y agoIf swap (and hibernation blob) is encrypted, then you'll be OK. TrueCrypt (when used with Pre-boot authentication) will encrypted everything including swap, dm-crypt/LUKS would configure encrypted swap, and with FileVault (actually even without FileVault) MacOS configures itself to use encrypted swap.
- xenophonf 13y agoOn FreeBSD you are probably better off using geli instead of gdbe. Geli supports both XTS and CBC (similar to ESSIV) modes, features data authentication, and can operate on the root file system. I've used it to encrypt both UFS2 file systems and ZFS pools (see https://web.irtnog.org/~xenophon/blog https://web.irtnog.org/~xenophon/blog for my notes on combining ZFS and geli).
- xenophonf 13y agoEr, sorry, the old one is called gbde. My fingers must be hardwired for "gdb". ;-)