-
@ SuperDicq @ FOSDEM
2025-02-27 09:39:53
I'd just like to interject for a moment. What you're referring as "Full Disk Encryption", is in fact, only 99.99% disk encryption, or as I've recently taken to calling it, partial disk encryption. Due to the boot key problem in combination with proprietary BIOS/UEFI software full disk encryption is not possible on most systems.
Many computer users run partial disk encryption every day, without realizing it. Through a peculiar turn of events, this version of disk encryption which is widely used today is often called "Full Disk Encryption", and many of its users are not aware that is basically only partial disk encryption.
There really is a full disk encryption, and people are using it, but it is only possible if you have control over the BIOS/UEFI software. GNU Boot is a free BIOS/UEFI replacement firmware that allows you to install pre-boot authentication software (such as GNU GRUB with cryptomount) outside of your disk, enabling real true full disk encryption.