Which Layer to Encrypt at?

• Filesystems with built in encryptions are ideal if you have one that does everything you need. In real life, they are rare

• EncFS is a nice idea, but FUSE and going through user space just is slower and potentially not as reliable (but better with bit flips or partition resizing). Good concept, but not an ideal implementation.

• Block level forces to encrypt the entire partition, but gives the best performance, choice of filesystems, and can encrypt swap