Hi! :-)
I set my crypttab according to the faq, this way:
cswap /dev/sda6 /dev/urandom
swap,noearly,cipher=aes-xts-plain64,size=256,hash=sha1
Then I thought to give bench a try and here are the results:
#cryptsetup benchmark
# Tests are approximate using memory only (no storage IO).
PBKDF2-sha1 364088 iterations per second for 256-bit key
PBKDF2-sha256 481882 iterations per second for 256-bit key
PBKDF2-sha512 276523 iterations per second for 256-bit key
PBKDF2-ripemd160 266406 iterations per second for 256-bit key
PBKDF2-whirlpool 208713 iterations per second for 256-bit key
# Algorithm | Key | Encryption | Decryption
aes-cbc 128b 442,2 MiB/s 1048,8 MiB/s
serpent-cbc 128b 37,3 MiB/s 133,1 MiB/s
twofish-cbc 128b 94,4 MiB/s 112,2 MiB/s
aes-cbc 256b 344,5 MiB/s 897,0 MiB/s
serpent-cbc 256b 39,5 MiB/s 133,0 MiB/s
twofish-cbc 256b 97,5 MiB/s 109,6 MiB/s
aes-xts 256b 718,2 MiB/s 715,2 MiB/s
serpent-xts 256b 129,9 MiB/s 131,3 MiB/s
twofish-xts 256b 110,6 MiB/s 110,6 MiB/s
aes-xts 512b 624,7 MiB/s 631,5 MiB/s
serpent-xts 512b 132,3 MiB/s 130,8 MiB/s
twofish-xts 512b 111,4 MiB/s 111,2 MiB/s
#
Ehm...a couple of questions only: :-)
1) Is SHA256 faster than the default SHA1?
Should I replace hash=sha1 with hash=sha256?
and 2) I can see (at Algorithm column) the aes-xts entry but not the
aes-xts-plain64 (from cipher=aes-xts-plain64)
Do I have to replace cipher=aes-xts-plain64 with cipher=aes-xts?
TIA! :-)
G.
_______________________________________________
dm-crypt mailing list
dm-crypt@xxxxxxxx
https://www.saout.de/mailman/listinfo/dm-crypt
