-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 a.engels@xxxxxxx wrote: > I need the highest possible security, because the backup servers are not > trustworthy. Then use loop-AES :) > I also read some pages about a (very theoretical) attack of AES. Does > somebody have benchmarks for AES128, AES256 and other ciphers like twofish > etc? Are the performance differences between these ciphers even noticeable > on a P4 3 GHz running database services and Samba? I don't have a link for benchmarks but would be interested in one though. By rule of thumb, you won't notice loop-AES on such a large machine if the server load is low/medium. AES is implemented in optimized assembler code. AES was picked because of its strength and speed. Serpent made 2nd place (it's considered slightly stronger than AES but slower - IIRC). > Another question: how does loop-aes react on bad blocks? Like bad physical sectors on hard disks? Nothing any soft can do about it. The data stored in those areas most likely can't be read/restored completely. That's bad enough, but with file system encryption each damaged sector is a total loss (IF I understand the working concept of loop-AES right). Jari will know for sure :) I consider myself lucky... haven't had to endure such a mess. A while ago I asked about worst case scenarios but aside from a hint to search the archives (doing so turned up negative), there was no reply. I take that as a good sign :-) - -- Bastard Administrator in $hell -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) iD8DBQFA8q0kLMyTO8Kj/uQRAuqLAJ9JqREpxoVgnXWKXTYXZVlu8h5fNgCfcJ8C PbF9IY03XaBPZkGz0mTtrgM= =lQJ8 -----END PGP SIGNATURE----- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/
