Whole drives. No noticeable performance impact for me, and I've rebuilt all my systems to Windows 10 1511 which allows for XTS-AES 256 bit encryption. Unless someone has the recovery keys, I'd be confident that it's strong enough that if my house got broken into, no-one would get at my data.