Post #2668319

2026-05-01 10:03 UTC

What advantage does secure boot have compared to full disk encryption? The only examples I’ve seen have been contrived evil maid attack that fails under scrutiny.

Replies (2)

@AcornTickler@sh.itjust.works 2026-05-01 12:39

If you have to choose between one, then yes; full disk encryption is superior. But they should ideally be used in tandem. Without secure boot, you are vulnerable to evil maid attacks. A bad actor can modify your bootloader (which has to remain unencrypted) in a way that allows them to steal your encryption keys. Secure Boot prevents running unsigned bootloaders, which negates this risk.

Open ##2668321
@Auth@lemmy.world 2026-05-04 00:56

Evil maid is one advantage but signed modules is another. Secure boot can prevent you from loading unsigned kernel modules once booted. You basically need to have both or your computer is practically open for anyone who has physical access to the device. For my desktop I dont use either but for my laptop i’d never leave home without both.

Open ##2668325