On 7/17/07, Joachim Schipper <[EMAIL PROTECTED]> wrote:
But why encrypt the whole disk? I can see why you'd want to encrypt user data - say, /home - but why encrypt boring stuff like /usr?
This makes cryptanalysis harder since it's impossible to distinguish interesting data from uninteresting data. You have to deal with 30 Go (for example) of ciphered data. In addition when the whole disk is encrypted you don't have to bother about is it encrypted or not, is my data secure? Yes it is, everything is encrypted, wherever it might be. You say that /usr is boring... Are you sure?

