FreeBSD provides robust support for encryption both for data at rest and in transit, implementing a variety of mechanisms to ensure data security.

Encryption for Data at Rest

GEOM-based Encryption:

FreeBSD uses the GEOM framework to support disk encryption. Specifically, the `geom_eli` module provides support for Full Disk Encryption (FDE). With `geom_eli`, you can encrypt entire disk partitions or volumes. This module uses the `crypt(4)` framework and supports various encryption algorithms, including AES.