You may want to also consider the use of an openpgp card for creation and storage of crypto keys.

With regard to the filesystem encryption: It depends.

There are non-trivial trade-offs with regard to overhead and data integrity when considering these options on a laptop. Power failures or other sudden shutdowns of the system can be problematic. These situations are far more common on a laptop environment where the system tends to be booted often, run a wider array of userland software and has a decidedly wider task arena.

Food for thought.

- Erich

On Sat, Mar 8, 2008 at 12:12 AM, Richard Wilson <relw@mchsi.com> wrote:
All,

I am setting up my laptop to be as encrypted as possible, and I'm
leaning towards using LUKS partitions to do the work.  Is it possible to
only have an unencrypted /boot and have everything else encrypted?  From
what I found on the 'net so far, that may not be possible.

I have experimented with Truecrypt as well and that is a decent
alternative.  Any opinions as to which is "better"?

Any full disk encryption tools out there that are Linux compatible?

Thanks in advance,

Richard Wilson
relw at mchsi dot com

---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss



--
"A man is defined by the questions that he asks; and the way he goes about finding the answers to those questions is the way he goes through life."