Hacker News Reader

You should always use disk encryption and shutdown(hibernate) your notebook while traveling. There is no noticeable performance degradation on modern hardware.

Windows: Truecrypt

Linux: dm-crypt + LUKS

FreeBSD: gdbe

MacOS: probably FileVault

View on HN

On FreeBSD you are probably better off using geli instead of gdbe. Geli supports both XTS and CBC (similar to ESSIV) modes, features data authentication, and can operate on the root file system. I've used it to encrypt both UFS2 file systems and ZFS pools (see https://web.irtnog.org/~xenophon/blog for my notes on combining ZFS and geli).

Er, sorry, the old one is called gbde. My fingers must be hardwired for "gdb". ;-)

Isn't hibernation actually a potential risk since the state of the machine is stored, which could potentially provide access to restricted files?

If swap (and hibernation blob) is encrypted, then you'll be OK.

TrueCrypt (when used with Pre-boot authentication) will encrypted everything including swap, dm-crypt/LUKS would configure encrypted swap, and with FileVault (actually even without FileVault) MacOS configures itself to use encrypted swap.

Reply on news.ycombinator.com