\section{Filesystem Encryption}
\begin{frame}
   {Filesystem Encryption}
   \begin{itemize}
      \item
      Protect filesystems from prying eyes
      \item
      Protect filesystems from attempts to corrupt the data
      they contain
      \item
      Encryption can be chosen at installation or
      incorporated later
      \item
      \textbf{Linux} distributions most often use the
      \textbf{LUKS} method and perform encryption-related
      tasks using \textbf{cryptsetup}
   \end{itemize}
\end{frame}

\cprotect\note{

   By the end of this section, you should be able to:
   \begin{itemize}
      \item
      Provide sound reasons for using encryption and know
      when it is called for.
      \item
      Understand how \textbf{LUKS} operates through the use
      of \textbf{cryptsetup}.
      \item
      Be able to set up and use encrypted filesystems and
      partitions.
      \item
      Know how to configure the system to mount encrypted
      partitions at boot.
   \end{itemize}

}

\begin{frame}
   {Why Use Encryption?}

   \begin{itemize}

      \item
      Secure sensitive data both for storage and
      transmission across networks.
      \item

      Block device level encryption provides one of the
      strongest protections against data loss or compromise.

      \item

      \textbf{Linux} distributions offer the choice of
      encrypting all or some of your disk partitions during
      installation.
      \item
      One can encrypt partitions post-installation, but
      encrypting an already existing partition in place
      requires copying the data over
   \end{itemize}

\end{frame}

\cprotect\note{

   Encryption should be used wherever sensitive data is
   being stored and transmitted.  Configuring and using
   block device level encryption provides one of the
   strongest protections against harm caused by loss or
   compromise of data contained in hard drives and other
   media.

   Modern \textbf{Linux} distributions offer the choice of
   encrypting all or some of your disk partitions during
   installation.  It is also straightforward to create and
   format encrypted partitions at a later time, but you can
   not encrypt an already existing partition in place
   without a data copying operation.

}
