[fpoling]

Does this mean that the hibernated image must be signed each time the laptop hibernates?

[heavyset_go]

The swap file that memory is dumped to during hibernation is on an encrypted disk. Upon wake, you need to unlock the disk before you can resume from hibernation.