On Tue, Jun 23, 2026 at 10:33:01AM -0700, David Christensen wrote: [...]
> Both configurations work, but have different performance and security > considerations: > > * partitions > RAID > encryption > filesystem > > Will encrypt the RAID virtual block device, saving CPU cycles and > requiring one passphrase and/or key. > > * partitions > encryption > RAID > filesystem > > Will encrypt each partition, arguably improving security but requiring > more CPU cycles and passphrases/ keys. Actually it would reduce security, IMO, because the opponent would have to find just one of both keys (the content is mirrored), thus potentially reducing the key strength by one bit. Not a big deal, granted :) Cheers -- tomás
signature.asc
Description: PGP signature
