On Linux you can do the following:
Hard drive:
{ [1MB unencrypted GRUB bootloader partition] [Rest of hard drive entirely
encrypted] }
Then the only parts of the (x64) computer that are unencrypted are the BIOS and
GRUB.
You can then move the GRUB offline if you wish, execute it externally.
Is something like this possible on OpenBSD?
