The diskashur and similar projects will come under the same scrutiny as SED devices’ built-in TCG Opal: that the encryption layer is closed source and not publicly auditable (unlike LUKS w/dm-crypt under Linux which is auditable).
The summary of my position is: use the hw encryption features available, but also use open-source software encryption on top. Belts and suspenders. B -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/439e6634-11de-4d84-aabd-a0c89b06313a%40googlegroups.com.
