XPost: alt.os.linux.mageia   
   From: dwhodgins@nomail.afraid.org   
      
   On Sun, 04 Sep 2022 06:55:18 -0400, Markus Robert Kessler  wrote:   
   > So, once again, thanks for all your ideas!   
      
   Glad you got it working. One thing I'd like to clarify. Using "hardware" based   
   encryption does not provide any extra security over using software based   
   encryption.   
      
   The "hardware" based encryption is just using software that is stored in the   
   firmware of the device, which you may or may not be able to update when   
   problems are found. The only benefit of using it is that an attacker has to   
   have a similar drive, and the tools/skill needed to switch parts from one   
   drive to another to access the encrypted data.   
      
   Once they have access to the encrypted data, the software used in the firmware   
   is more likely to have un-patched flaws that can be exploited, then up-to-date   
   file system encryption software such as luks.   
      
   A major drawback of hardware based encryption is that it can make it much more   
   difficult to move storage from one computer to new one if the old computer   
   fails.   
      
   Regards, Dave Hodgins   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)