How to protect files in use on a system powered on from physical theft or tampering?

I’m in the process of figuring out an encryption strategy for a personal Linux system.
My laptop is almost always on, or in sleep mode, except for longer travels.
My main threats are theft of my laptop while powered on, and evil maid.
It i… Continue reading How to protect files in use on a system powered on from physical theft or tampering?