Rapunzel, Let Down Your Hair: What Encryption at Rest Does — and Doesn’t — Protect
Rapunzel’s tower had no door and no stairs — impregnable, until anyone who knew the words could climb her hair. Encryption at rest is that tower. It stops the stolen disk; it does nothing against whoever can say ‘decrypt’.