I've been struggling with a solution to my encryption dilemma: how to I encrypt my sensitive data and still keep my machine usable for heavy media work? I need some sort of encryption so data isn't compromised if my computer is lost. I was initially pretty excited about PGP Whole Disk Encryption, but my benchmarks show some pretty depressing numbers. If I were an email-and-web sort of guy, it would probably be sufficient, but I do a lot of media work, and a drive that reads at just over 20MB/s is just too slow. This is too bad, because it looks like it is the only rock-solid way to do whole-disk encryption on the Mac. Truecrypt 5 just came out for Mac, but it only supports bootable whole-disk encryption on Windows.
Still, this article claims that there "no discernible difference" in real-world use between pre- and post-WDE, so I might give PGP WDE a try.
If it doesn't work, I'm going to have to resort to using FileVault, which is build into Mac OS X (read Experiences with FileVault and How to use FileVault Safely for more). This way, I can keep my big media files and other files that require fast data transfer outside of the encrypted user folder. Also, the Mac OS X system files, applications, swap space, etc. don't have to live inside the poor-performance area. If I enable the "Use secure virtual memory" option, it should make my data relatively safe. I know certain aspects of FileVault have been cracked, but it looks like it takes a lot of resources and know-how to pull that off.
This is all a compromise. I'd much rather have a hardware encryption solution, but information on those products is spotty. I know that Fujitsu offers 2.5" drives with hardware encryption, and SSDs with hardware encryption are just starting to be announced, but it is hard to find information on whether they work with Macs.
I'm almost done making my second backup of the MacBook Pro. When that is done, I'll be ready to give this all a try. What a pain in the ass.
**UPDATE**: It's been around 14 hours, and FileVault is *still* "Deleting old Home folder..." (secure erase). I'm not sure how long I'm supposed to wait, but all online accounts state that aborting it does really bad things.
**UPDATE**: I did a hard-reset after about 16 hours, and my machine booted up just fine. There were some orphaned "old home folder" files in the User folder under, and I am using PathFinder's secure erase feature to wipe them now. Now, to test performance...