On Sun, Dec 20, 2015 at 5:00 AM, David Christensen <dpchr...@holgerdanske.com> wrote: > > Another, additional, option is self-encrypting drives (SED), which are > operating system agnostic and protect the entire contents of drive with zero > CPU overhead.
Emphasis on the word "additional" here. Unless you have access to the source code and hardware that actually implements the drive encryption, I would trust it about as far as I can throw the drive, and I am not a strong man. There should not be any issues using it as an additional layer under LUKS though, if you enjoy entering a lot of passphrases. :)