Use LUKS for disk encryption. You can even use it to encrypt thumbdrives. It's easier than you think!

shasum -a256=f11e5c52e73a4447f9e67ff1ee54825318f5c81e2993f59ecbd0fbb3b370c4bf