I have a OpenBSD 7.9 with FDE setup on my laptop. In userspace I have on /etc/apm/resume, xlock to lock the screen on resume. When I am on the go, I keep my laptop in sleep mode for faster access. And I was wondering if there any security holes with this setup? If an attacker got my laptop, and wake it from sleep, will they be able get the decrypted information from my storage or memory some way I do not know of?
Both my FDE and user/root passwords have high entropy. How would you secure your laptop on the go? If your threat model is is just theft and brute-forcing?
