1

I have a 850 Evo SSD that currently has Windows 10 installed. I'm planning to install Linux in a few days on dual-boot.

I have installed some Linux machines. During installation the wizard gives me an option to encrypt my home folder. Never used that option (because I thought that could decrease performance) and the system works fine as supposed.

Now that I installed recently a SSD, Samsung Magician offers me as well to encrypt my drive. So, is SSD encryption bring benefits for my system? How it works?

Be in mind that I only used the Linux subject because it was my very first contact with encryption drives at all.

I'm running a i3-2120 @ 3.3 GHz, which do not have AES New Instructions

Improve this question
9
  • In modern systems and particularly when running from a SSD the performance impact of encryption is negligible.
    – user772515
    Apr 12, 2018 at 11:00
  • @MichaelBay The machines I installed Linux were kinda weak for Windows (it couldn't just run flawlessly), the best thing I done was installing Linux! I even installed on my own machine but my hard drive screwed up everything. So, encryption never crossed my mind
    – CaldeiraG
    Apr 12, 2018 at 11:06
  • Encryption is only useful when there's sensitive data to protect and the ones the data should be protected from may gain physical access to the computer, as explained in the answer below. Otherwise you can go without it.
    – user772515
    Apr 12, 2018 at 11:10
  • What CPU does the system have? This is important because if it has aes-ni support encryptio(simplistic speaking ) does not slow things down significantly - almost all new systems have it, but as you go back it time it was only available on some.
    – davidgo
    Apr 12, 2018 at 18:07
  • 3
    Many modern SSDs support self-encryption, meaning there is no CPU load whatsoever when using that. The tools for that are a little fiddly though.
    – Daniel B
    Apr 12, 2018 at 18:41

2 Answers 2

Reset to default
1

In many Linux distros (including Ubuntu) there are 2 main ways to install encryption on setup -

Full disk encryption creates a small boot partition which is unencrypted with just enough stuff to start the OS and get a passphrase, then using this to mount the main partition and rest of the IS. It's is the more secure way to go because, excluding a well defined limited area, all data is encrypted. It's fine using luks - which is standard smong Linux distros, meaning you can recover data even if the computer fails and you need to use another one.

The alternate option is file level encryption. This generally only encrypts files in users home directories. It's conceptually more complex to implement and not as secure (the encryption is good, but unexpected data may not be encrypted, and hints can be leaked in file size -I and it has got a larger attack surface) - but as it's only encrypting some files it's less CPU intensive.

On your system, using encryption will have a noticeable performance impact because the I3-2120 CPU does not have aes-ni support to speed up AES encryption/decryption.

Improve this answer
1

Unencrypted drives can be accessed easily by booting your machine via recovery media and resetting superuser password to whatever or adding the drive to other OS.

If you have data in your system that needs to be protected by password, it should be encrypted.

Improve this answer
1
  • Another thing to add is that this is more relevant for SSDs as fully wiping an SSD is a lot harder then a HDD because it abstracts the disk from the computer because of the way it manages writes.
    – davidgo
    Apr 12, 2018 at 18:11

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .