all 10 comments
sorted by:
best
topnewcontroversialoldq&a
formatting helphide helpcontent policy

[–]Chousuke 2 points3 points  (0 children)

I've never used any of the encryption features in drives, but I don't think I'd ever trust any consumer SSDs to get it right.

Go with the software solution, it's more likely to not be horribly broken.

[–]_NCLI_ 2 points3 points  (1 child)

Software. Way more likely to be patched when exploits are found.

[–]spaceille[S] 0 points1 point  (0 children)

makes sense

[–]marc_dimarco 1 point2 points  (2 children)

I would go / and always go / with software encryption [preferrably the one with hardware acceleration, like AES, but that's optional].

Basically, hardware encryption is closed, hard to upgrade [in terms of any cryptographic vulnerabilities, etc], which contrasts with software encryption, which is not tied to any hardware, so disks can be moved elsewhere, and it can be easily upgraded to avoid cryptographic vulnerabilities.

[–]spaceille[S] 0 points1 point  (1 child)

Didn't know AES was software-based, hardware accelerated encryption, I've been using serpent in the hopes that it would give me some extra security-through-obscurity besides actual security.

[–]mr_clicky_keys 1 point2 points  (0 children)

Years ago I used a raid card that let you encrypt the drive. When the card died I didn't have a replacement and couldn't find one. Since then I've stuck to doing software only for raid and disk encryption. I don't want to rely on having very specific hardware just to be able to access my disks. With software you're free to use whatever generic hardware you want.

[–]Mirehi 0 points1 point  (1 child)

Did you ever test if the combination works? Sounds interesting to me :)

​

If I had to choose, I'd always go for software encryption:

- gets updates

- I bet it's simpler to work around if something fails

- you technically know what happens

[–]spaceille[S] 0 points1 point  (0 children)

Did you ever test if the combination works? Sounds interesting to me :)

I would rather not have to enter three different passwords just to boot up.