Can you explain more about this?
Even if my disk wore off faster, I'd still use full-disk encryption. What if laptop is lost or stolen with financial info in it?
Even if my disk wore off faster, I'd still use full-disk encryption. What if laptop is lost or stolen with financial info in it?
The reason FDE breaks SSDs is that the implementation in LVM works at the block level. To send TRIM, the filesystem says "this block is empty, tell the controller" but depending on a thousand things, among which are cipher mode, cipher block size and other minutiae, LVM will invalidate the TRIM command. Without TRIM, SSDs deteriorate rather quickly.
Personally, I understand why FDE is needed but I'm of the opinion that selective encryption (with possible plausible deniability measures) is a much neater, if more difficult, approach.