[rgbrenner]

a lot of ssds already encrypt the data using aes... and you can send a command to the drive telling it to erase the key.

better because it's harder to bruteforce an aes key than a passphrase.