> (I'd prefer OPEL, the drive encryption on-controller, for performance reasons, but Mac OS X doesn't support that.)

When available, OSX makes use of the hardware AES-NI capabilities of the CPU though.