Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
(Solved)samsung840 (SSD) AES onboard hardware for LUKS/trim?
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Kernel & Hardware
View previous topic :: View next topic  
Author Message
jpc22
Apprentice
Apprentice


Joined: 29 Jan 2012
Posts: 195

PostPosted: Thu Mar 27, 2014 9:04 pm    Post subject: (Solved)samsung840 (SSD) AES onboard hardware for LUKS/trim? Reply with quote

Considering buying a ssd to speed up things on my laptop and have done my homework on ssd and luks already but i still have concerns/questions:

Should i just put my encryption on top of theirs when i buy a 840 pro for my laptop and set good passwords for the Bios master, Bios on boot , onboard HDD / Ata drive encryption , my own encryption , and then passwords for root/users /grsec...

Already have lots of them so i guess one more is trivial, but should i set the harddrive password to prevent someone/thing else from setting on and preventing me to acess my data.

Or should i forget about the onboard encryption but erase the code on the drive that allows to delete data and write it down and hide it somewhere better than on the drive and hopes nothing ****s up and screws my data.


Questions now:
Is there a way to use the hardware for luks? or is it possible write a kernel driver for the AES chip and onboard ram onboard those drives and encrypt the ram/store keys to cpu buffers with TRESOR?

Should we expect that method to be faster and to consume less power than the intel AES-NI on some CPU's, by freeing the processor form the decryption work?
Or is it just not worth the trouble?


Last edited by jpc22 on Sun Apr 20, 2014 8:12 pm; edited 1 time in total
Back to top
View user's profile Send private message
eccerr0r
Watchman
Watchman


Joined: 01 Jul 2004
Posts: 9883
Location: almost Mile High in the USA

PostPosted: Thu Mar 27, 2014 10:52 pm    Post subject: Reply with quote

I don't think you can use the ssd hardware for encryption other than what it does on its own. You'll have to use the CPU for encryption.

Pretty much your call whether you want to trust on-drive encryption or not. Most US DoD does not and forces people to incinerate failed SSDs to make sure data is not recoverable.

I have yet to encrypt my laptop's SSD... lazy lazy lazy...
_________________
Intel Core i7 2700K/Radeon R7 250/24GB DDR3/256GB SSD
What am I supposed watching?
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Kernel & Hardware All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum