> FDE will be slightly less performant,
Really? I thought there was no impact at all. As a matter of fact, I'm
tempted to think that disks that support FDE simply *always* pass the
data through the encrypt/decrypt stage: at the hardware-level it's often
preferable if the data looks "random" anyway (e.g. doesn't have long
runs of 0s or long runs of 1s).
Stefan