Security Basics mailing list archives

Re: Truecrypt


From: Roscoe <eocsor () gmail com>
Date: Sun, 16 Nov 2008 09:44:57 +1300

On Fri, Nov 14, 2008 at 8:22 AM, Douglas Duckworth
<stlpcsecurity () gmail com> wrote:
I've been using Truecrypt on my personal laptop for two moths.  The entire
drive and boot sector are encrypted and I've noticed insignificant
performance decreases.

FWIW If you value performance you could only encrypt the sections of
the system that require confidentiality.

Speaking from a GNU/Linux perspective, there's not much worthwhile to
be gained from having /usr, /bin, etc...Encrypted.
Rather, one could opt to encrypt just swap, /tmp, /home and either all
of or sections of /var [like /var/tmp].

-- Roscoe


Current thread: