Basics of Cryptographic Filesystems
mix_master_mike writes "Found a good article over at security focus: cryptographic filesystems: design and implementation. Nice piece on this level of security that isn't being used very effectively in the industry."
Very good point.
And that's why the swap space of OpenBSD is encrypted. Fortunately some programmers already thought of this =)
you only need the hey (removable/biometrics) when you boot, the decryption key can then be held in volatile, non-paged RAM until shutdown.