I am considering using OpenZFS on FreeBSD. I am not quite sure how secure native OpenZFS encryption is? If somebody steals my server and the disks, is he able to decrypt the files?
In a Discord room I found a possible answer:
Native ZFS encryption is still fairly new in the world of software encryption, and it doesn't hide as much through obfuscation as more well-established alternatives like LUKS and VeraCrypt (formerly TrueCrypt.) However, it lets you protect your data without losing the efficiencies and features of ZFS, even when the dataset is locked: creating snapshots, compression, incremental replications, etc.
Is that about right? Are there any important additions to the security of OpenZFS encryption?