128bit on-the-fly disk encryption