I just bought a new Thinkpad t450s, and put a Samsung 850 pro in it. My Cpu supports AES-NI and the SSD supports hard-ware based encryption.
My question is, is there any reason to do Both Hardware-based encryption and Software (DM-crypt/Luks), or would it better to do only one or the other? If there are concerns about hardware encryption, could using both compromise the software-based encryption in any way?
I understand there are concerns about hardware-based encryption having backdoors etc, but it also sounds like it is significantly faster. Using this setup, will there be a significant performance hit using just LUKS?
My primary concern is security; performance is secondary to that, but I don't want to go over-the-top if it will make no real difference.
Does the hardware-encryption support (in the SSD) at all speed up software encryption in linux?