Full-disk encryption performance in Librem 5

[maximilian]

Hi all,

Sorry to revive this old conversation, there was no official statement on fde yet.

As we know from

Will the Librem 5 have a TPM?

First off, I’d like to apologize if this has been addressed already, and I just haven’t come across it yet. I’ve been trying to find information via developer.puri.sm/Librem5 and on the forums, but I wasn’t successful. I know they are working on a USB-C version of the Librem Key that will be able to work with the Librem 5 similar to how the current Librem Key works with the Librem 13/15. Am I correct to assume the Librem 5 will have a TPM as well? I didn’t see any mention of it in the hardware r…

there will be no TPM in the librem 5.

Have you (puri.sm) or someone with a dev kit already tested a fde and the resulting performance (if it’s already testable)? Will a full disk encryption be some kind of standard on the phone? Even without a TPM it would be possible for me to enter the very long decryption password on boot up - assuming that with the battery time and loading the battery before 0 % I won’t have to boot up many times.

In case there is no fde planned, having everything e2e encrypted but all your “junk” or even log in data with the decryption keys lie unencrypted on your phones unencrypted disk? :-/ I am feeling a bit odd that a robber could see photos (my junk ;-)) made on a librem 5 if they were not encrypted.

Maybe @dcz or @nicole.faerber could give some insight if fde as standard is planned

Thank you