From owner-freebsd-questions@FreeBSD.ORG Wed Jan 14 21:56:53 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8DEEE1065DE0 for ; Wed, 14 Jan 2009 21:56:53 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: from mail-ew0-f21.google.com (mail-ew0-f21.google.com [209.85.219.21]) by mx1.freebsd.org (Postfix) with ESMTP id 1D8558FC1B for ; Wed, 14 Jan 2009 21:56:52 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: by ewy14 with SMTP id 14so1186579ewy.19 for ; Wed, 14 Jan 2009 13:56:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=gamma; h=domainkey-signature:received:received:date:from:to:subject :message-id:in-reply-to:references:x-mailer:mime-version :content-type:content-transfer-encoding; bh=5K8MdBnu/wXksKEGCBmMCRhr31IDphipGUA8bo2K+mg=; b=XID1qmioX55ZSRw/AdtnHXcuHawpDR2W+NBG2vSLP1uilQymCrMaos4XA0skNa+Q/L 6Sus1fP7UpAJ2p8kNxknXowMTSGvjaKWoSPsiI4v801/krg/Iap+xCBfrTWHmlIpVFhd WHHAVVjnUgl7EYoBwcpC/oAXR+3Y7El2Ekvv8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=gamma; h=date:from:to:subject:message-id:in-reply-to:references:x-mailer :mime-version:content-type:content-transfer-encoding; b=Dm71XVqfE+z6HySQwmFP1AShSWndRgNBntXhQEN+IRKxWgMJwwFeKXDCqbl9T4nnEt dKaUAnMo8ylh8x9rjzvmgYmF622W3AzbMc1IWhmZeq+/Y+gGVyENFE0K9g3oOlFgNtoo vL1BVnCNKn90Jf3c+7vOkMOpxpNmmCK02AW5E= Received: by 10.210.109.10 with SMTP id h10mr731626ebc.110.1231970212166; Wed, 14 Jan 2009 13:56:52 -0800 (PST) Received: from gumby.homeunix.com (bb-87-81-140-128.ukonline.co.uk [87.81.140.128]) by mx.google.com with ESMTPS id c25sm423299ika.8.2009.01.14.13.56.50 (version=SSLv3 cipher=RC4-MD5); Wed, 14 Jan 2009 13:56:51 -0800 (PST) Date: Wed, 14 Jan 2009 21:56:47 +0000 From: RW To: freebsd-questions@freebsd.org Message-ID: <20090114215647.68cf3b0e@gumby.homeunix.com> In-Reply-To: References: X-Mailer: Claws Mail 3.5.0 (GTK+ 2.12.11; i386-portbld-freebsd7.1) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Subject: Re: freebsd encrypted hard disk? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Jan 2009 21:56:56 -0000 On Wed, 14 Jan 2009 12:23:09 -0500 Johann Hasselbach wrote: > I read the "encrypting disk partitions" section of the Handbook. What > is the preferred method nowdays, geli or gbde? Geli. Geli is more secure when used with real-world passphrases, supports hardware acceleration, and is faster, with or without out it. As I understand it, geli is also more reliable due to some operations being non-atomic in gdbe and atomic in geli.