Disk encryption theory