On 06/29/2013 12:31 PM, Heinz Diehl wrote: > On 29.06.2013, Roberto Ragusa wrote: > >> CPUs with AES-NI make encryption speed penalty basically null (even on a >> SSD); > > This is not true in my case. My OCZ Vertex delivers 465 MB/s > unencrypted, and 167 MB/s encrypted with aes-xts-plain64:sha256 using > the Core i5-2450's AES-NI and AVX instruction set.
Your SSD is better (and/or newer) than mine: I see 217 MB/s both with encryption and without. In my tests (on my i7-2860QM) I remember to have measured about 900 MB/s when reading an encrypted loop device on a file on tmpfs. Note that I'm using aes-cbc-essiv:sha256, after discovering that the xts variant has half the speed (as it actually encrypts twice); my investigation about what kind of increased security it offers finally led me to avoid it. You should try aes-cbc-essiv:sha256, it could give you 330 MB/s. -- Roberto Ragusa mail at robertoragusa.it -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
