Re: 1,5 TB partition: use cbc-essiv or xts-plain?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Aug 7, 2009 at 09:20, Salatiel Filho<salatiel.filho@xxxxxxxxx> wrote:
> On Fri, Aug 7, 2009 at 09:16, Salatiel Filho<salatiel.filho@xxxxxxxxx> wrote:
>> On Thu, Aug 6, 2009 at 13:02, Salatiel Filho<salatiel.filho@xxxxxxxxx> wrote:
>>> On Thu, Aug 6, 2009 at 13:00, Salatiel Filho<salatiel.filho@xxxxxxxxx> wrote:
>>>> On Thu, Aug 6, 2009 at 12:24, Heinz Diehl<htd@xxxxxxxxxxxxxxxxx> wrote:
>>>>> On 06.08.2009, Henrik Theiling wrote:
>>>>>
>>>>>> Fascinating.  I thought Serpent was universally the slowest of the
>>>>>> three big algorithms (AES/Rijndael, Twofish, Serpent) that was used if
>>>>>> you wanted highest security margins.  Your speed test results come
>>>>>> quite unexpected for me...
>>>>>
>>>>> The question is: how has this been measured, and is it faster on both read
>>>>> and write operations? E.g. a simple "hdparm -tT /dev/xxx" is not sufficient.
>>>>>
>>>> I just encrypted the partition , put some random data there [i do not
>>>> care about write speed in this particular storage, it is just a NAS
>>>> (ARM 266 + 128RAM running debian lenny)], then drop_caches , export
>>>> the data using nfs, mount from another machine and copy that file.
>>>> Repeated the proccess using aes and using serpent. Serpent is much faster ...
>>>> I really don't know which cipher is/shouldbe faster, but serpent gives
>>>> me a great speed ...
>>>>
>>>>> How about a bonnie++ run, e.g. something like
>>>>> "bonnie++ -u htd:users -d /mnt/test -s 16016m -m liesel -n 16:100000:16:6"
>>> i will try to do this tonight.
>>>
>>
>>
>> I changed the bonnie parameters cause this machine is really slow and
>> it has only 128Mb RAM. Here are the results, which i'd be glad if
>> someone could explain then to me :)
>>
>> # bonnie++ -d /mnt -f -n0 -m serpent -s 250
>> [ext4,cipher=serpent-cbc-essiv:sha256,size=256]
>> Using uid:1000, gid:1000.
>> Writing intelligently...done
>> Rewriting...done
>> Reading intelligently...done
>> start 'em...done...done...done...
>> Version 1.03d       ------Sequential Output------ --Sequential Input-
>> --Random-
>>                    -Per Chr- --Block-- -Rewrite- -Per Chr- --Block--
>> --Seeks--
>> Machine        Size K/sec %CP K/sec %CP K/sec %CP K/sec %CP K/sec %CP
>> /sec %CP
>> serpent        250M            1607   5   910   3            2403   3
>> 126.8   3
>> serpent,250M,,,1607,5,910,3,,,2403,3,126.8,3,,,,,,,,,,,,,
>>
>>
>>
>> # bonnie++ -d /mnt -f -n0 -m aes -s 250
>> [ext4,cipher=aes-cbc-essiv:sha256,size=256]
>>
>> Using uid:1000, gid:1000.
>> Writing intelligently...done
>> Rewriting...done
>> Reading intelligently...done
>> start 'em...done...done...done...
>> Version 1.03d       ------Sequential Output------ --Sequential Input-
>> --Random-
>>                    -Per Chr- --Block-- -Rewrite- -Per Chr- --Block--
>> --Seeks--
>> Machine        Size K/sec %CP K/sec %CP K/sec %CP K/sec %CP K/sec %CP
>> /sec %CP
>> aes            256M             623   2   400   1            1319   1
>> 116.2   3
>> aes,256M,,,623,2,400,1,,,1319,1,116.2,3,,,,,,,,,,,,,
>>
>>
>>
>>
> I am going to redo the test , apparently i used 250M for serpent and
> 256M for aes ...
> repost results soon.
>
>>
>>
Here :



Version 1.03d       ------Sequential Output------ --Sequential Input-
--Random-
                    -Per Chr- --Block-- -Rewrite- -Per Chr- --Block--
--Seeks--
Machine        Size K/sec %CP K/sec %CP K/sec %CP K/sec %CP K/sec %CP
/sec %CP
serpent        256M            2050   7  1209   3            2959   4
138.8   3
serpent,256M,,,2050,7,1209,3,,,2959,4,138.8,3,,,,,,,,,,,,,


Version 1.03d       ------Sequential Output------ --Sequential Input-
--Random-
                    -Per Chr- --Block-- -Rewrite- -Per Chr- --Block--
--Seeks--
Machine        Size K/sec %CP K/sec %CP K/sec %CP K/sec %CP K/sec %CP
/sec %CP
aes            256M             625   2   445   1            1455   2
113.5   3
aes,256M,,,625,2,445,1,,,1455,2,113.5,3,,,,,,,,,,,,,




>>
>>
>>
>>
>>
>>
>>
>>
>>
>>>>>
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> dm-crypt mailing list
>>>>> dm-crypt@xxxxxxxx
>>>>> http://www.saout.de/mailman/listinfo/dm-crypt
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> []'s
>>>> Salatiel
>>>>
>>>> "O maior prazer do inteligente é bancar o  idiota
>>>>   diante de um  idiota que banca o inteligente".
>>>>
>>>
>>>
>>>
>>> --
>>> []'s
>>> Salatiel
>>>
>>> "O maior prazer do inteligente é bancar o  idiota
>>>   diante de um  idiota que banca o inteligente".
>>>
>>
>>
>>
>> --
>> []'s
>> Salatiel
>>
>> "O maior prazer do inteligente é bancar o  idiota
>>   diante de um  idiota que banca o inteligente".
>>
>
>
>
> --
> []'s
> Salatiel
>
> "O maior prazer do inteligente é bancar o  idiota
>   diante de um  idiota que banca o inteligente".
>



-- 
[]'s
Salatiel

"O maior prazer do inteligente é bancar o  idiota
   diante de um  idiota que banca o inteligente".
_______________________________________________
dm-crypt mailing list
dm-crypt@xxxxxxxx
http://www.saout.de/mailman/listinfo/dm-crypt


[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux