Contents
Should I use LUKS encryption?
LUKS encryption method is potentially unsafe, at least in the way it handles the encryption process. Lets give it the benefit of the doubt the algorithms are safe and we can compare them to algorithm code that has been audited. Putting that aside, as a user, you aren’t allowed to create a key that encrypts your data.
What is SSD encryption?
Samsung SSDs (solid state drives) are equipped with full drive encryption to prevent unauthorized access by anyone not in possession of the drive’s password. With full drive encryption, Samsung SSDs are protected against theft of data due to lost or stolen drives or the computers containing the drives.
Do you recommend LUKS encryption on a SSD?
It is possible to trim it manually with fstrim tool if everything configured correctly (subject is covered in various howtos). Aside “trim” support, speed decreases dramatically so advantages on using ssd with luks are questionable. Thanks for contributing an answer to Ask Ubuntu!
Do you recommend LUKS encryption ( TRIM support )?
See also TRIM on an encrypted SSD Whether TRIM is supported or not for LUKS encrypted partitions, I’d certainly enable it unless your data isn’t worth anything. LUKS does not allow TRIM by befault, because of security concerns. Given the right versions of kernel and cryptsetup you can enable it though, either manually or on boot.
Why do we need a self encrypting hard drive?
If your storage drive has a built-in controller that supports hardware encryption, such as a 256-bit AES encryption controller, you can use full disk encryption, which is sometimes called a self-encrypting drive. Hardware encryption is better for security because it’s almost impossible for someone to get the data off a drive that is encrypted.
Why is hardware encryption better for data security?
Hardware encryption is better for security because it’s almost impossible for someone to get the data off a drive that is encrypted. The person who has the encryption key, however, can encrypt or decrypt the drive in just a few clicks. Because the encryption method uses the drive, rather than the CPU, there is no slow down in performance.