Re: 1,5 TB partition: use cbc-essiv or xts-plain?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Aug 7, 2009 at 09:16, Salatiel Filho<salatiel.filho@xxxxxxxxx> wrote:
> On Thu, Aug 6, 2009 at 13:02, Salatiel Filho<salatiel.filho@xxxxxxxxx> wrote:
>> On Thu, Aug 6, 2009 at 13:00, Salatiel Filho<salatiel.filho@xxxxxxxxx> wrote:
>>> On Thu, Aug 6, 2009 at 12:24, Heinz Diehl<htd@xxxxxxxxxxxxxxxxx> wrote:
>>>> On 06.08.2009, Henrik Theiling wrote:
>>>>
>>>>> Fascinating.  I thought Serpent was universally the slowest of the
>>>>> three big algorithms (AES/Rijndael, Twofish, Serpent) that was used if
>>>>> you wanted highest security margins.  Your speed test results come
>>>>> quite unexpected for me...
>>>>
>>>> The question is: how has this been measured, and is it faster on both read
>>>> and write operations? E.g. a simple "hdparm -tT /dev/xxx" is not sufficient.
>>>>
>>> I just encrypted the partition , put some random data there [i do not
>>> care about write speed in this particular storage, it is just a NAS
>>> (ARM 266 + 128RAM running debian lenny)], then drop_caches , export
>>> the data using nfs, mount from another machine and copy that file.
>>> Repeated the proccess using aes and using serpent. Serpent is much faster ...
>>> I really don't know which cipher is/shouldbe faster, but serpent gives
>>> me a great speed ...
>>>
>>>> How about a bonnie++ run, e.g. something like
>>>> "bonnie++ -u htd:users -d /mnt/test -s 16016m -m liesel -n 16:100000:16:6"
>> i will try to do this tonight.
>>
>
>
> I changed the bonnie parameters cause this machine is really slow and
> it has only 128Mb RAM. Here are the results, which i'd be glad if
> someone could explain then to me :)
>
> # bonnie++ -d /mnt -f -n0 -m serpent -s 250
> [ext4,cipher=serpent-cbc-essiv:sha256,size=256]
> Using uid:1000, gid:1000.
> Writing intelligently...done
> Rewriting...done
> Reading intelligently...done
> start 'em...done...done...done...
> Version 1.03d       ------Sequential Output------ --Sequential Input-
> --Random-
>                    -Per Chr- --Block-- -Rewrite- -Per Chr- --Block--
> --Seeks--
> Machine        Size K/sec %CP K/sec %CP K/sec %CP K/sec %CP K/sec %CP
> /sec %CP
> serpent        250M            1607   5   910   3            2403   3
> 126.8   3
> serpent,250M,,,1607,5,910,3,,,2403,3,126.8,3,,,,,,,,,,,,,
>
>
>
> # bonnie++ -d /mnt -f -n0 -m aes -s 250
> [ext4,cipher=aes-cbc-essiv:sha256,size=256]
>
> Using uid:1000, gid:1000.
> Writing intelligently...done
> Rewriting...done
> Reading intelligently...done
> start 'em...done...done...done...
> Version 1.03d       ------Sequential Output------ --Sequential Input-
> --Random-
>                    -Per Chr- --Block-- -Rewrite- -Per Chr- --Block--
> --Seeks--
> Machine        Size K/sec %CP K/sec %CP K/sec %CP K/sec %CP K/sec %CP
> /sec %CP
> aes            256M             623   2   400   1            1319   1
> 116.2   3
> aes,256M,,,623,2,400,1,,,1319,1,116.2,3,,,,,,,,,,,,,
>
>
>
>
I am going to redo the test , apparently i used 250M for serpent and
256M for aes ...
repost results soon.

>
>
>
>
>
>
>
>
>
>
>
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> dm-crypt mailing list
>>>> dm-crypt@xxxxxxxx
>>>> http://www.saout.de/mailman/listinfo/dm-crypt
>>>>
>>>
>>>
>>>
>>> --
>>> []'s
>>> Salatiel
>>>
>>> "O maior prazer do inteligente é bancar o  idiota
>>>   diante de um  idiota que banca o inteligente".
>>>
>>
>>
>>
>> --
>> []'s
>> Salatiel
>>
>> "O maior prazer do inteligente é bancar o  idiota
>>   diante de um  idiota que banca o inteligente".
>>
>
>
>
> --
> []'s
> Salatiel
>
> "O maior prazer do inteligente é bancar o  idiota
>   diante de um  idiota que banca o inteligente".
>



-- 
[]'s
Salatiel

"O maior prazer do inteligente é bancar o  idiota
   diante de um  idiota que banca o inteligente".
_______________________________________________
dm-crypt mailing list
dm-crypt@xxxxxxxx
http://www.saout.de/mailman/listinfo/dm-crypt


[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux