I would __rather use software encryption__ as from what I hear, the hardware contains a mechanism to recover the data without the key.