I'm currently thinking about buying a ThinkPad X201 and equip it with a SSD drive. Now, to protect my data I always used Linux with LUKS full disk encryption on my laptops. However, as stated in another SuperUser post, this would disable the support for TRIM - so that doesn't seem to be a good idea with a SSD drive.
I've read that SandForce-1200 based SSDs offer integrated AES encryption tied to the BIOS password. However I can't find proper documentation on this. Questions:
- Any general drawbacks to this approach?
- I suppose this would require BIOS support for the feature - how to find out if works on a X201?
- Old BIOS versions only supported short (like 6 or 8 characters) passwords, has this situation improved to provide sufficient security for a disk encryption?
Update: This Source says you can't even set any password on these drives. Huh? That doesn't make sense, why would you even do the complicated AES operatins when you don't allow to use a key?
Thank you for any expert advice on the matter :)