My only concern with deleting the partition and selecting the hard drive itself for encryption is the MBR vs GPT thing. I hadn't thought about that, but I suppose that's what would be the case if you encrypt a drive-size partition. (Of course a hidden volume could overcome this, but why let adversaries know it's encrypted at all if you can avoid it?) One commenter stated: "Having an intact partition table followed by a gigantic partition filled with random data screams 'this is encrypted' and not securely erased." It seems that the only real difference is that if you encrypt a drive-sized partition, it means you'll lose any real deniability of encryption. Is there any advantage/disadvantage to deleting all partitions and encrypting the drive itself? (Otherwise, you can only encrypt the partitions individually.)
From what I'm reading, it looks like to encrypt the drive (if it's a non-system drive), you have to delete all partitions. I'm curious about encrypting the drive versus encrypting a partition that takes up the full amount of drive space.
0 kommentar(er)
