You may want to also consider the use of an openpgp card for creation and
storage of crypto keys.
With regard to the filesystem encryption: It depends.
There are non-trivial trade-offs with regard to overhead and data integrity
when considering these options on a laptop. Power failures or other sudden
shutdowns of the system can be problematic. These situations are far more
common on a laptop environment where the system tends to be booted often,
run a wider array of userland software and has a decidedly wider task arena.
Food for thought.
- Erich
On Sat, Mar 8, 2008 at 12:12 AM, Richard Wilson <
relw@mchsi.com> wrote:
> All,
>
> I am setting up my laptop to be as encrypted as possible, and I'm
> leaning towards using LUKS partitions to do the work. Is it possible to
> only have an unencrypted /boot and have everything else encrypted? From
> what I found on the 'net so far, that may not be possible.
>
> I have experimented with Truecrypt as well and that is a decent
> alternative. Any opinions as to which is "better"?
>
> Any full disk encryption tools out there that are Linux compatible?
>
> Thanks in advance,
>
> Richard Wilson
> relw at mchsi dot com
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
--
"A man is defined by the questions that he asks; and the way he goes about
finding the answers to those questions is the way he goes through life."
---------------------------------------------------
PLUG-discuss mailing list -
PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
(text/plain)